diff --git a/roles/tftp/tasks/main.yml b/roles/tftp/tasks/main.yml
new file mode 100644
index 0000000..f16c7a7
--- /dev/null
+++ b/roles/tftp/tasks/main.yml
@@ -0,0 +1,39 @@
+- name: ensure tftp-server is installed
+  package:
+    name: tftp-server
+    state: present
+  tags:
+  - install
+
+- name: ensure tftpboot directory exists
+  file:
+    path: /var/lib/tftpboot
+    owner: root
+    group: root
+    mode: ug=rwx,o=rx
+    state: directory
+    force: false
+  tags:
+  - datadir
+
+- name: ensure tftp server starts at boot
+  systemd:
+    name: tftp.socket
+    enabled: true
+  tags:
+  - service
+- name: ensure tftp server is running
+  systemd:
+    name: tftp.socket
+    state: started
+  tags:
+  - service
+
+- name: ensure firewall is configured for tftp
+  firewalld:
+    service: tftp
+    permanent: true
+    immediate: true
+    state: enabled
+  tags:
+  - firewall