diff --git a/roles/batcave/files/ticketkey.cron b/roles/batcave/files/ticketkey.cron
new file mode 100755
index 0000000000..884b124b9c
--- /dev/null
+++ b/roles/batcave/files/ticketkey.cron
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+# Roll over the proxy SSL ticketkey
+/usr/bin/ansible /srv/web/infra/ansible/playbooks/update_ticketkey.yml | mailx -s "TickeyKey rollover" puiterwijk@fedoraproject.org
diff --git a/roles/batcave/tasks/main.yml b/roles/batcave/tasks/main.yml
index e3b75bc7b5..b1267ecc74 100644
--- a/roles/batcave/tasks/main.yml
+++ b/roles/batcave/tasks/main.yml
@@ -82,6 +82,11 @@
   - batcave
   - config
  
+- name: setup cron for daily tickeyket reollover
+  copy: src=ticketkey.cron dest=/etc/cron.daily/tickeykey.cron mode=0755
+  tags:
+  - batcave
+  - config
 #
 # Set selinux booleans we need
 #