diff --git a/tasks/Debian.yml b/tasks/Debian.yml
new file mode 100644
index 0000000..6be3389
--- /dev/null
+++ b/tasks/Debian.yml
@@ -0,0 +1,13 @@
+---
+# openvpn tasks/Debian.yml
+#
+# SPDX-FileCopyrightText: 2022 Open Networking Foundation <support@opennetworking.org>
+# SPDX-License-Identifier: Apache-2.0
+
+- name: Install openvpn apt packages
+  apt:
+    name:
+      - openvpn
+    install_recommends: false  # don't install easy-rsa
+    update_cache: true
+    cache_valid_time: 3600