diff --git a/restic.yml b/restic.yml
index c014776..5246a60 100644
--- a/restic.yml
+++ b/restic.yml
@@ -1,5 +1,10 @@
 - hosts: restic
   roles:
+  - role: trustca
+    ca: dch-root-ca-r2
+    tags:
+    - trustca
+    - dch-root-ca
   - role: restic
     tags:
     - restic