diff --git a/fvs-www-server.yml b/fvs-www-server.yml
new file mode 100644
index 0000000..d7a690c
--- /dev/null
+++ b/fvs-www-server.yml
@@ -0,0 +1,29 @@
+## This playbook deploys a FvS web server machine.
+---
+- name: apply configuration to the web server
+  hosts: all
+  remote_user: ansible
+  become: yes
+  vars:
+    extra_pkgs:
+      - vim
+      - apache2
+      - python3-flask
+
+    extra_pkgs_bpo: [ ]  # [ libreoffice ]
+
+  roles:
+    - up2date-debian
+    - fvs-sssd
+
+  tasks:
+    - name: enable pam_mkhomedir.so
+      lineinfile:
+        dest: /etc/pam.d/common-session
+        line: "session	optional	pam_mkhomedir.so  umask=0026"
+        insertbefore: "session	optional	pam_mount.so"
+
+    - name: enable apache mod userdir
+      apache2_module:
+        state: present
+        name: userdir
diff --git a/roles/fvs-client/tasks/main.yml b/roles/fvs-client/tasks/main.yml
index c428a5c..6a98698 100644
--- a/roles/fvs-client/tasks/main.yml
+++ b/roles/fvs-client/tasks/main.yml
@@ -4,11 +4,11 @@
     dest: /etc/firefox-esr/firefox-esr.js
     line: pref("browser.startup.homepage", "https://www.startpage.com");
 
-- name: set capabilities (wireshark)
-  capabilities:
-    path: /usr/bin/dumpcap
-    capability: cap_net_raw,cap_net_admin+eip
-    state: present
+    #- name: set capabilities (wireshark)
+    #capabilities:
+    #path: /usr/bin/dumpcap
+    #capability: cap_net_raw,cap_net_admin+eip
+    #state: present
 
 
 ############## extra data partition ###############