diff --git a/playbooks/mrwho/vm03-certbot.yml b/playbooks/mrwho/vm03-certbot.yml
new file mode 100644
index 0000000..57f8945
--- /dev/null
+++ b/playbooks/mrwho/vm03-certbot.yml
@@ -0,0 +1,33 @@
+---
+- name: Install and configure Certbot
+  hosts: vm03
+  become: true
+  gather_facts: true
+
+  vars:
+    certbot_install_method: package
+    certbot_admin_email: mrwho@mrwho.ru
+    certbot_auto_renew: true
+    certbot_auto_renew_user: "{{ ansible_user | default(lookup('env', 'USER')) }}"
+    certbot_auto_renew_hour: "5"
+    certbot_auto_renew_minute: "{{ 59 |random(seed=inventory_hostname) }}" # random number between 0-59
+    certbot_auto_renew_options: --quiet --no-self-upgrade
+    certbot_create_reload_services:
+      - nginx
+    certbot_create_if_missing: true
+    certbot_delete_certs: false
+    certbot_certs:
+      - domains:
+          - mrwho.ru
+          - "*.mrwho.ru"
+    certbot_testmode: false
+    # Generate key with: tsig-keygen -a HMAC-SHA512 CertbotKey
+    certbot_dns_plugin: rfc2136
+    certbot_dns_target_server: 212.60.5.162
+    certbot_dns_target_server_port: 53
+    certbot_dns_tsig_keyname: CertbotKey
+    certbot_dns_key_secret: "as1NQi1QHYX/hAuSR+EbyPYZNgsM2NcTTmSDvPFzkghzUNHAFFSQmabs03gm543vH6X4gYFKXhkzRP2/gQ7nNA=="
+    certbot_dns_key_algorithm: HMAC-SHA512
+
+  roles:
+    - certbot-dns