diff --git a/roles/fvs-client-mkhome/tasks/main.yml b/roles/fvs-client-mkhome/tasks/main.yml
index c682836..0d7657b 100644
--- a/roles/fvs-client-mkhome/tasks/main.yml
+++ b/roles/fvs-client-mkhome/tasks/main.yml
@@ -17,6 +17,16 @@
     line: "BASE {{ basedn }}"
     insertafter: "#BASE.*"
 
+- name: do not verify cert
+  lineinfile:
+    dest: /etc/ldap/ldap.conf
+    line: "LDAPTLS_REQCERT      never"
+
+- name: set homepage
+  lineinfile:
+    dest: /etc/firefox-esr/firefox-esr.js
+    line: pref("browser.startup.homepage", "https://www.startpage.com");
+
     #- name: enable pam_umask
     #  lineinfile:
     #    dest: /etc/pam.d/common-session
diff --git a/roles/fvs-client-mkhome/templates/sssd.conf.j2 b/roles/fvs-client-mkhome/templates/sssd.conf.j2
index 394207a..977426a 100644
--- a/roles/fvs-client-mkhome/templates/sssd.conf.j2
+++ b/roles/fvs-client-mkhome/templates/sssd.conf.j2
@@ -16,5 +16,4 @@ ldap_search_base = {{ basedn }}
 
 auth_provider = ldap
 cache_credentials = true
-
 ldap_tls_reqcert = never