diff --git a/data/hostname/banco.softwareheritage.org.yaml b/data/hostname/banco.softwareheritage.org.yaml
index 4026be48..d0831590 100644
--- a/data/hostname/banco.softwareheritage.org.yaml
+++ b/data/hostname/banco.softwareheritage.org.yaml
@@ -1,76 +1,87 @@
 smtp::mynetworks:
   - 127.0.0.0/8
   - "[::ffff:127.0.0.0]/104"
   - "[::1]/128"
   - 192.168.128.0/24  # storage array, for notification emails
   - 192.168.129.0/24  # storage array, for notification emails
 
 smtp::mail_aliases:
   - user: barman
     aliases:
       - root
 
 smtp::relayhost: '[pergamon.internal.softwareheritage.org]'
 
 dar::backup::exclude:
   - srv/barman
   - srv/softwareheritage/annex
 
 swh::apt_config::enable_non_free: true
 packages:
   - intel-microcode
 
 # open objstorage api
 swh::deploy::objstorage::backend::listen::host: 0.0.0.0
 swh::deploy::objstorage::backend::workers: 16
 
+swh::deploy::objstorage::ceph::keyring: /etc/softwareheritage/objstorage/ceph-keyring
+swh::deploy::objstorage::ceph::rados_id: swh-contents-rw
+
+ceph::client_keyrings:
+  '/etc/softwareheritage/objstorage/ceph-keyring':
+    owner: root
+    group: swhstorage
+    mode: '0640'
+    keys:
+      - "%{alias('swh::deploy::objstorage::ceph::rados_id')}"
+
 icinga2::host::vars:
   disks:
     disk /srv/storage/0:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/1:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/2:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/3:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/4:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/5:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/6:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/7:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/8:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/9:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/a:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/b:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/c:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/d:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/e:
       disk_wfree: '6%'
       disk_cfree: '3%'
     disk /srv/storage/f:
       disk_wfree: '6%'
       disk_cfree: '3%'