diff --git a/rpm/defaults/main.yml b/rpm/defaults/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..ff999da27f8396b5fa60d74de06361535a0b0a41
--- /dev/null
+++ b/rpm/defaults/main.yml
@@ -0,0 +1,4 @@
+---
+
+rocky_repo_crb: true
+rocky_repo_epel: true
diff --git a/rpm/tasks/main.yml b/rpm/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..f97977cada640f8b2a62b942f4e8b570e7a5456a
--- /dev/null
+++ b/rpm/tasks/main.yml
@@ -0,0 +1,19 @@
+---
+
+- name: Enable CRB repository
+  community.general.ini_file:
+    no_extra_spaces: true
+    path: /etc/yum.repos.d/rocky.repo
+    section: crb
+    option: enabled
+    value: "{{ rocky_repo_crb|int }}"
+
+- name: Enable EPEL repository
+  ansible.builtin.dnf:
+    name: epel-release
+    state: >-
+      {%- if rocky_repo_epel -%}
+        present
+      {%- else -%}
+        absent
+      {%- endif -%}