diff --git a/ansible/inventory/host_vars/kodi00.balsillie.house/ansible_connection.yaml b/ansible/inventory/host_vars/kodi00.balsillie.house/ansible_connection.yaml
new file mode 100644
index 0000000..d6c73af
--- /dev/null
+++ b/ansible/inventory/host_vars/kodi00.balsillie.house/ansible_connection.yaml
@@ -0,0 +1,9 @@
+ansible_connection: ssh
+ansible_host: kodi00.balsillie.house
+ansible_fqdn: kodi00.balsillie.house
+ansible_remote_addr: 10.192.210.169
+ansible_port: 22
+ansible_user: ladmin
+ansible_become_user: root
+ansible_become_method: sudo
+static_fqdn: kodi00.balsillie.house
diff --git a/ansible/inventory/inventory.yaml b/ansible/inventory/inventory.yaml
index 53139f8..4a775b6 100644
--- a/ansible/inventory/inventory.yaml
+++ b/ansible/inventory/inventory.yaml
@@ -52,10 +52,11 @@ all:
           hosts:
             lat5420.balsillie.house:
             sff.balsillie.house:
+            kodi00.balsillie.house:
         windows:
           hosts:
             lat7490.balsillie.house:
-            win11.balsillie.house: 
+            win11.balsillie.house:
         laptops:
           hosts:
             lat5420.balsillie.house:
@@ -64,3 +65,7 @@ all:
           hosts:
             sff.balsillie.house:
             mp00.balsillie.house:
+            kodi00.balsillie.house:
+        kodi:
+          hosts:
+            kodi00.balsillie.house:
diff --git a/ansible/playbooks/infra/kodi.yaml b/ansible/playbooks/infra/kodi.yaml
new file mode 100644
index 0000000..4eb5f19
--- /dev/null
+++ b/ansible/playbooks/infra/kodi.yaml
@@ -0,0 +1,7 @@
+- name: Install media services
+  hosts:
+    - kodi00.balsillie.house
+  gather_facts: true
+  become: true
+  roles:
+    - name: kodi
diff --git a/ansible/playbooks/infra/vp2420.yaml b/ansible/playbooks/infra/vp2420.yaml
index 3811fe4..3536f7d 100644
--- a/ansible/playbooks/infra/vp2420.yaml
+++ b/ansible/playbooks/infra/vp2420.yaml
@@ -38,4 +38,4 @@
   roles:
     - name: sshd_setup
 
-# VM setup
\ No newline at end of file
+# VM setup
diff --git a/ansible/roles/certbot/tasks/main.yaml b/ansible/roles/certbot/tasks/main.yaml
new file mode 100644
index 0000000..507832f
--- /dev/null
+++ b/ansible/roles/certbot/tasks/main.yaml
@@ -0,0 +1,10 @@
+- name: Install certbot package (Archlinux)
+  when: ansible_facts['os_family'] == "Archlinux"
+  community.general.pacman:
+    name:
+      - certbot
+      - certbot-dns-rfc2136
+    state: present
+    update_cache: true
+
+- name: Add certbot config