diff --git a/.pipeline.yml b/.pipeline.yml
index 6bb0be7..9450491 100644
--- a/.pipeline.yml
+++ b/.pipeline.yml
@@ -16,3 +16,18 @@ pipeline:
       - salt-call --local --retcode-passthrough state.show_highstate
       - bin/prepare_mock.py
       - salt-call --local --retcode-passthrough state.apply mock=True
+
+  sync_roles:
+    image: registry.opensuse.org/home/crameleon/libertacasa/containers/containerfile/libertacasa/rolesyncer:latest
+    secrets:
+      - source: rolesyncer_nbh
+        target: NB_HOST
+      - source: rolesyncer_nbt
+        target: NB_TOKEN
+    when:
+      branch: [production]
+      event: [push]
+      instance: woodpecker-orpheus.intranet.squirrelcube.com
+    commands:
+      #- rolesyncer
+      - bin/rolesyncer.py