diff --git a/mqtt-internal.yaml b/mqtt-internal.yaml
index 1e941f8..bdf76a8 100644
--- a/mqtt-internal.yaml
+++ b/mqtt-internal.yaml
@@ -1,6 +1,6 @@
 ---
 
-- hosts: mqtt_internal
+- hosts: mqtt
   roles:
     - common
     - mqtt-internal
diff --git a/roles/mqtt-internal/defaults/main.yaml b/roles/mqtt-internal/defaults/main.yaml
new file mode 100644
index 0000000..8cf4403
--- /dev/null
+++ b/roles/mqtt-internal/defaults/main.yaml
@@ -0,0 +1 @@
+mqtt_bambulab_cafile: /etc/mosquitto/ca_certificates/bambulab.pem
diff --git a/roles/mqtt-internal/tasks/main.yaml b/roles/mqtt-internal/tasks/main.yaml
index e468d01..371671c 100644
--- a/roles/mqtt-internal/tasks/main.yaml
+++ b/roles/mqtt-internal/tasks/main.yaml
@@ -8,6 +8,12 @@
           - mosquitto
           - avahi-daemon
 
+    - name: Install bambulab cafile
+      # openssl s_client -showcerts -connect <ip>:8883 </dev/null | sed -n -e '/-.BEGIN/,/-.END/ p'
+      ansible.builtin.copy:
+        dest: "{{ mqtt_bambulab_cafile }}"
+        content: "{{ lookup('passwordstore', 'bambulab subkey=cafile') }}"
+
     - name: Configure Mosquitto
       ansible.builtin.template:
         src: "{{ item }}"
@@ -17,6 +23,7 @@
         mode: 0644
       notify: restart mosquitto
       with_items:
+        - bambulab.conf
         - internal.conf
         - public-bridge.conf
 
diff --git a/roles/mqtt-internal/templates/bambulab.conf b/roles/mqtt-internal/templates/bambulab.conf
new file mode 100644
index 0000000..c475585
--- /dev/null
+++ b/roles/mqtt-internal/templates/bambulab.conf
@@ -0,0 +1,10 @@
+# {{ ansible_managed }}
+
+connection bambulab
+address {{ lookup('passwordstore', 'bambulab subkey=host') }}:8883
+bridge_cafile {{ mqtt_bambulab_cafile }}
+bridge_insecure true
+remote_username bblp
+remote_password {{ lookup('passwordstore', 'bambulab subkey=key') }}
+
+topic # in 2 bambulab/ ""
diff --git a/roles/mqtt-internal/templates/internal.conf b/roles/mqtt-internal/templates/internal.conf
index eba205a..d3a6d10 100644
--- a/roles/mqtt-internal/templates/internal.conf
+++ b/roles/mqtt-internal/templates/internal.conf
@@ -1,4 +1,4 @@
-# Managed by Ansible
+# {{ ansible_managed }}
 
 listener 1883 ::
 listener 1883 0.0.0.0
diff --git a/roles/mqtt-internal/templates/public-bridge.conf b/roles/mqtt-internal/templates/public-bridge.conf
index fb97159..b1725cb 100644
--- a/roles/mqtt-internal/templates/public-bridge.conf
+++ b/roles/mqtt-internal/templates/public-bridge.conf
@@ -1,4 +1,4 @@
-# Managed by Ansible
+# {{ ansible_managed }}
 
 connection public-bridge
 address {{ mqtt_public_host }}