diff --git a/roles/base/tasks/main.yaml b/roles/base/tasks/main.yaml
index 4884a9d..88b1dbb 100644
--- a/roles/base/tasks/main.yaml
+++ b/roles/base/tasks/main.yaml
@@ -47,3 +47,10 @@
     path: /root/.ssh/authorized_keys
     line: "{{ item }}"
   loop: "{{ extra_root_keys }}"
+
+- name: Add journalctl cleanup
+  ansible.builtin.cron:
+    name: "check dirs"
+    minute: "0"
+    hour: "0"
+    job: "/usr/bin/journalctl --vacuum-size=3d"