diff --git a/gerrit/acls/vexxhost/vexxhost.config b/gerrit/acls/vexxhost/vexxhost.config
new file mode 100644
index 0000000000..973e03f548
--- /dev/null
+++ b/gerrit/acls/vexxhost/vexxhost.config
@@ -0,0 +1,13 @@
+[access "refs/heads/*"]
+abandon = group vexxhost-core
+label-Code-Review = -2..+2 group vexxhost-core
+label-Workflow = -1..+1 group vexxhost-core
+
+[access "refs/tags/*"]
+pushSignedTag = group vexxhost-core
+
+[receive]
+requireChangeId = true
+
+[submit]
+mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 1b64072ae8..4e1561e7a4 100755
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -8174,6 +8174,10 @@
 - project: stackforge/xstatic-angular-animate
   description: RETIRED, Angular Animate JavaScript library packaged as XStatic.
   acl-config: /home/gerrit2/acls/stackforge/retired.config
+- project: vexxhost/ansible-role-wireguard
+  description: Ansible role to manage Wireguard tunnels
+  upstream: https://github.com/vexxhost/ansible-role-wireguard
+  acl-config: /home/gerrit2/acls/vexxhost/vexxhost.config
 - project: zuul/project-config
   description: Zuul configuration files for the Zuul tenant
   use-storyboard: true
diff --git a/zuul/main.yaml b/zuul/main.yaml
index b6d05fb687..d9af52202b 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -8,6 +8,7 @@
           - opendev/base-jobs
         untrusted-projects:
           - openstack-infra/zuul-jobs
+          - vexxhost/ansible-role-wireguard
 
 - tenant:
     name: kata-containers