diff --git a/books/vpn.yml b/books/vpn.yml
new file mode 100644
index 0000000..77ab98b
--- /dev/null
+++ b/books/vpn.yml
@@ -0,0 +1,5 @@
+#!/usr/bin/env ansible-playbook
+---
+- hosts: vpn
+  roles:
+    - vpn
diff --git a/hosts b/hosts
index 3428f5a..f343c30 100644
--- a/hosts
+++ b/hosts
@@ -4,7 +4,7 @@ all:
     ubuntu:
       hosts:
         hindley.adh.auro.re:
-    debian:
+    debian-buster:
       hosts:
         azerty.fil.sand.auro.re:
         dns-histausse.fil.sand.auro.re:
@@ -34,3 +34,7 @@ all:
         vm1:
         vm2:
         vm3:
+    vpn:
+      hosts:
+        azerty.fil.sand.auro.re:
+        hindley.adh.auro.re:
diff --git a/roles/vpn/tasks/main.yml b/roles/vpn/tasks/main.yml
new file mode 100644
index 0000000..41451b2
--- /dev/null
+++ b/roles/vpn/tasks/main.yml
@@ -0,0 +1,6 @@
+---
+- name: Add backports to buster
+  apt_repository:
+    repo: deb http://deb.debian.org/debian buster-backports main
+    state: present
+  when: "'debian-buster' in group_names"