diff --git a/roles/k3s/handlers/main.yaml b/roles/k3s/handlers/main.yaml
new file mode 100644
index 0000000..338cd05
--- /dev/null
+++ b/roles/k3s/handlers/main.yaml
@@ -0,0 +1,7 @@
+---
+- name: start k3s
+  systemd:
+    daemon-reload: yes
+    name: k3s
+    state: restarted
+    enabled: yes
diff --git a/roles/k3s/tasks/main.yaml b/roles/k3s/tasks/main.yaml
new file mode 100644
index 0000000..017ec4e
--- /dev/null
+++ b/roles/k3s/tasks/main.yaml
@@ -0,0 +1,12 @@
+---
+- name: fetch k3s binary
+  get_url:
+    dest: /usr/local/sbin/k3s
+    mode: 0755
+    url:  https://github.com/rancher/k3s/releases/download/v1.0.0/k3s
+- name: k3s service file
+  template:
+    src: service-k3s.j2
+    dest: /etc/systemd/system/k3s.service
+  notify: start k3s
+- name: enable and start k3s
diff --git a/roles/k3s/templates/service-k3s.j2 b/roles/k3s/templates/service-k3s.j2
new file mode 100644
index 0000000..5d0cbd6
--- /dev/null
+++ b/roles/k3s/templates/service-k3s.j2
@@ -0,0 +1,8 @@
+[Unit]
+Description=k3s cluster
+After=network-online.target
+
+[Service]
+Environment=K3S_TOKEN={{k3s_token}}
+Environment=K3S_DATASTORE_ENDPOINT=http://node01:2379,http://node02:2379,http://node03:2379
+Exec=/usr/local/sbin/k3s server --no-deploy traefik --bind-address {{wg_ip}} --advertise_address {{wg_ip}}
diff --git a/site.yml b/site.yml
index 5d537ed..2b3fb3d 100644
--- a/site.yml
+++ b/site.yml
@@ -6,3 +6,4 @@
     - wireguard
     - gluster
     - etcd
+    - k3s