diff --git a/group_vars/samba-dc.yml b/group_vars/samba-dc.yml
index 608ffcf..3fe7fff 100644
--- a/group_vars/samba-dc.yml
+++ b/group_vars/samba-dc.yml
@@ -10,3 +10,8 @@ samba_shares:
 - name: netlogon
   path: /var/lib/samba/sysvol/{{ krb5_realm|lower }}/scripts
   read_only: no
+
+samba_tls_enabled: true
+samba_tls_keyfile: /etc/pki/tls/private/samba.key
+samba_tls_certfile: /etc/pki/tls/certs/samba.cer
+samba_tls_cafile: /etc/pki/tls/certs/samba-ca.crt