diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..affcc56
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,3 @@
+postfixadmin_mysql_database: postfixadmin
+postfixadmin_mysql_username: postfixadmin
+postfixadmin_mysql_password: eehahhoaQuai3oomochep7ca
diff --git a/tasks/main.yml b/tasks/main.yml
index d04a568..489ab60 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,15 +1,40 @@
 ---
 
+- name: mysql database
+  mysql_db:
+    name: "{{postfixadmin_mysql_database}}"
+    state: present
+
+- name: mysql user
+  mysql_user:
+    name: "{{postfixadmin_mysql_username}}"
+    password: "{{postfixadmin_mysql_password}}"
+    priv: "{{postfixadmin_mysql_database}}.*:ALL,GRANT"
+    state: present
+
+- name: disable dbconfig
+  debconf:
+    name: postfixadmin
+    question: postfixadmin/dbconfig-{{item}}
+    answer: false
+    vtype: boolean
+  with_items:
+    - install
+    - reinstall
+    - remove
+    - upgrade
+
 - name: install packages
   apt:
-    pkg: postfixadmin
+    pkg: "{{item}}"
+  with_items:
+    - postfixadmin
+    - ca-certificates
 
-# fix https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857791
-- name: change dbtype to mysqli (debian bug \#857791)
-  lineinfile:
+- name: dbconfig
+  template:
+    src: dbconfig.inc.php.j2
     dest: /etc/postfixadmin/dbconfig.inc.php
-    regexp: ^\$dbtype\=
-    line: $dbtype='mysqli';
 
 - name: ensure template_c folder is writable by webserver
   file:
diff --git a/templates/dbconfig.inc.php.j2 b/templates/dbconfig.inc.php.j2
new file mode 100644
index 0000000..1134069
--- /dev/null
+++ b/templates/dbconfig.inc.php.j2
@@ -0,0 +1,18 @@
+<?php
+##
+## database access settings in php format
+## automatically generated from /etc/dbconfig-common/postfixadmin.conf
+## by /usr/sbin/dbconfig-generate-include
+##
+## by default this file is managed via ucf, so you shouldn't have to
+## worry about manual changes being silently discarded.  *however*,
+## you'll probably also want to edit the configuration file mentioned
+## above too.
+##
+$dbuser='{{postfixadmin_mysql_username}}';
+$dbpass='{{postfixadmin_mysql_password}}';
+$basepath='';
+$dbname='{{postfixadmin_mysql_database}}';
+$dbserver='localhost';
+$dbport='3306';
+$dbtype='mysqli';