diff --git a/roles/nomad/tasks/main.yml b/roles/nomad/tasks/main.yml
new file mode 100644
index 0000000..3ced348
--- /dev/null
+++ b/roles/nomad/tasks/main.yml
@@ -0,0 +1,131 @@
+---
+- name: Install dependencies
+  apt:
+    name:
+      - curl
+      - gnupg
+      - lsb-release
+      - qemu-system-x86
+      - qemu-utils
+    state: present
+    update_cache: yes
+  when: nomad_driver_qemu
+
+- name: Ensure HashiCorp GPG key is present
+  apt_key:
+    url: https://apt.releases.hashicorp.com/gpg
+    state: present
+
+- name: Ensure HashiCorp repository is present
+  apt_repository:
+    repo: "deb [arch=amd64] https://apt.releases.hashicorp.com {{ ansible_distribution_release }} main"
+    state: present
+    filename: hashicorp
+
+- name: Install Nomad
+  apt:
+    name: "nomad={{ nomad_version }}-1"
+    state: present
+    update_cache: yes
+
+- name: Create Nomad data directory
+  file:
+    path: "{{ nomad_data_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+
+- name: Create Nomad config directory
+  file:
+    path: "{{ nomad_config_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: '0755'
+
+- name: Create CNI plugins directory
+  file:
+    path: /opt/cni/bin
+    state: directory
+    mode: '0755'
+
+- name: Download CNI plugins
+  unarchive:
+    src: "https://github.com/containernetworking/plugins/releases/download/v{{ nomad_cni_version }}/cni-plugins-linux-amd64-v{{ nomad_cni_version }}.tgz"
+    dest: /opt/cni/bin
+    remote_src: yes
+    creates: /opt/cni/bin/bridge
+
+- name: Configure bridge networking for CNI
+  copy:
+    dest: /etc/sysctl.d/99-nomad-bridge.conf
+    content: |
+      net.bridge.bridge-nf-call-arptables = 1
+      net.bridge.bridge-nf-call-ip6tables = 1
+      net.bridge.bridge-nf-call-iptables = 1
+    mode: '0644'
+  notify: Reload sysctl
+
+- name: Load br_netfilter module
+  modprobe:
+    name: br_netfilter
+    state: present
+
+- name: Ensure br_netfilter loads on boot
+  copy:
+    dest: /etc/modules-load.d/br_netfilter.conf
+    content: "br_netfilter"
+    mode: '0644'
+
+- name: Deploy Nomad base configuration
+  template:
+    src: nomad.hcl.j2
+    dest: "{{ nomad_config_dir }}/nomad.hcl"
+    owner: root
+    group: root
+    mode: '0640'
+  notify: Restart Nomad
+
+- name: Deploy server configuration
+  template:
+    src: server.hcl.j2
+    dest: "{{ nomad_config_dir }}/server.hcl"
+    owner: root
+    group: root
+    mode: '0640'
+  when: nomad_server
+  notify: Restart Nomad
+
+- name: Remove server config on non-servers
+  file:
+    path: "{{ nomad_config_dir }}/server.hcl"
+    state: absent
+  when: not nomad_server
+
+- name: Deploy client configuration
+  template:
+    src: client.hcl.j2
+    dest: "{{ nomad_config_dir }}/client.hcl"
+    owner: root
+    group: root
+    mode: '0640'
+  when: nomad_client
+  notify: Restart Nomad
+
+- name: Enable and start Nomad service
+  systemd:
+    name: nomad
+    enabled: yes
+    state: started
+    daemon_reload: yes
+
+- name: Wait for Nomad to be ready
+  uri:
+    url: "http://127.0.0.1:4646/v1/status/leader"
+    method: GET
+  register: nomad_leader
+  until: nomad_leader.status == 200
+  retries: 30
+  delay: 2
+  when: nomad_server