diff --git a/roles/squid/files/private-tmp.conf b/roles/squid/files/private-tmp.conf
new file mode 100644
index 0000000..c5b7f01
--- /dev/null
+++ b/roles/squid/files/private-tmp.conf
@@ -0,0 +1,3 @@
+[Service]
+PrivateTmp=yes
+TemporaryFileSystem=/dev/shm:mode=1777