diff --git a/vars/ipsets.yml b/vars/ipsets.yml
new file mode 100644
index 0000000..4334999
--- /dev/null
+++ b/vars/ipsets.yml
@@ -0,0 +1,6 @@
+---
+
+ghetto_ipsets:
+  public: { src: '0.0.0.0/0' }
+
+# vim: set ts=2 sw=2:
diff --git a/web.yml b/web.yml
index c0029b9..460be4d 100644
--- a/web.yml
+++ b/web.yml
@@ -11,6 +11,7 @@
     - php5-fpm
     - munin
   vars_files:
+    - vars/ipsets.yml
     - "vars/{{ ansible_os_family }}.yml"
 
 # vim: set sw=2 ts=2: