diff --git a/inventory b/inventory
index 37fffd9..9c8c768 100644
--- a/inventory
+++ b/inventory
@@ -13,6 +13,8 @@ littlered.seandersontech.com
 [pi_cluster]
 goldsquad-[1:4].seandersontech.com
 
+[database]
+goldsquad-2.seandersontech.com
 
 [webservers]
 webserver-01
diff --git a/playbooks/provision_pgdb/site.yml b/playbooks/provision_pgdb/site.yml
new file mode 100644
index 0000000..55866be
--- /dev/null
+++ b/playbooks/provision_pgdb/site.yml
@@ -0,0 +1,5 @@
+---
+name: Provision Postgres database container
+hosts: database
+roles:
+  - podman_login
diff --git a/roles/install_pgdb/tasks/.main.yml.swp b/roles/install_pgdb/tasks/.main.yml.swp
deleted file mode 100644
index d1e7023..0000000
Binary files a/roles/install_pgdb/tasks/.main.yml.swp and /dev/null differ
diff --git a/roles/podman_login/README.txt b/roles/podman_login/README.txt
new file mode 100644
index 0000000..e799182
--- /dev/null
+++ b/roles/podman_login/README.txt
@@ -0,0 +1,2 @@
+# Purpose
+This role logs into rh via podman
diff --git a/roles/podman_login/tasks/main.yml b/roles/podman_login/tasks/main.yml
new file mode 100644
index 0000000..42bea46
--- /dev/null
+++ b/roles/podman_login/tasks/main.yml
@@ -0,0 +1,7 @@
+---
+- name: login to registry.redhat.io
+  containers.podman.podman_login:
+    username: '{{ rh_username }}'
+    password: '{{ rh_token }}'
+    registry: '{{ registry }}'
+    tlsverify: '{{ tlsverify }}'
diff --git a/roles/podman_login/vars/main.yml b/roles/podman_login/vars/main.yml
new file mode 100644
index 0000000..3ff845d
--- /dev/null
+++ b/roles/podman_login/vars/main.yml
@@ -0,0 +1,5 @@
+---
+rh_username: '{{ lookup("env", "CONTAINER_REGISTRY_USERNAME") }}'
+rh_token: '{{ lookup("env", "CONTAINER_REGISTRY_PASSWORD") }}'
+registry: '{{ lookup("env", "CONTAINER_REGISTRY_HOST") }}'
+tls_verify: '{{ lookup("env", "CONTAINER_REGISTRY_VERIFY_SSL") }}'