diff --git a/roles/firewall/tasks/main.yml b/roles/firewall/tasks/main.yml
index 9112bbf7eccb5e17e6da34df81056599da7e0a3d..1c712713f81331de5df0c96f8e7c9f04ce5a8cd3 100644
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@@ -1,5 +1,15 @@
 - include_vars: firewall.yaml
 
+- name: Get HAProxy archive key
+  ansible.builtin.apt_key:
+    id: AEF2348766F371C689A7360095A42FE8353525F9
+    url: https://haproxy.debian.net/bernat.debian.org.gpg
+    state: present
+- name: Add HAProxy apt repo
+  ansible.builtin.apt_repository:
+    repo: deb http://haproxy.debian.net bullseye-backports-2.6 main
+    state: present
+    filename: 'haproxy'
 - name: Install firewall packages
   ansible.builtin.package:
     name: