diff --git a/ansible/inventories/production/host_vars/git.jthan.io/vars.yaml b/ansible/inventories/production/host_vars/git.jthan.io/vars.yaml
index 1c5bb3a..268217a 100644
--- a/ansible/inventories/production/host_vars/git.jthan.io/vars.yaml
+++ b/ansible/inventories/production/host_vars/git.jthan.io/vars.yaml
@@ -1 +1,2 @@
 gitea_version: 1.25.3
+root_pw: "{{ lookup('bitwarden.secrets.lookup', '4c3d81e6-bb31-40f9-a37a-b3bd00484160') }}" 
diff --git a/ansible/roles/common/tasks/main.yaml b/ansible/roles/common/tasks/main.yaml
index 694754b..02c16d2 100644
--- a/ansible/roles/common/tasks/main.yaml
+++ b/ansible/roles/common/tasks/main.yaml
@@ -3,6 +3,12 @@
     name: "{{ inventory_hostname }}"
     use: systemd
 
+- name: Set root password
+  user:
+    name: root
+    password: "{{ root_pw | password_hash('sha512') }}"
+  when: root_pw | default(false)
+
 - name: Install firewalld on RedHat family
   package:
     name: firewalld