diff --git a/backup.yaml b/backup.yaml
index 036a1c3..da5150e 100644
--- a/backup.yaml
+++ b/backup.yaml
@@ -6,4 +6,5 @@
     - common
     - internalsmtp
     - backupscript
+    - backuphost
 ...
diff --git a/roles/backuphost/tasks/main.yaml b/roles/backuphost/tasks/main.yaml
new file mode 100644
index 0000000..07dd62c
--- /dev/null
+++ b/roles/backuphost/tasks/main.yaml
@@ -0,0 +1,14 @@
+---
+- name: "Add backup user"
+  ansible.builtin.user:
+    name: backup
+    comment: Backup user
+    shell: /bin/bash
+
+- name: "Dsiable service user"
+  ansible.builtin.user:
+    name: service-user
+    state: present
+    password_lock: true
+    shell: "/sbin/nologin"
+...