diff --git a/.gitmodules b/.gitmodules
index 7c6d45a..8f41214 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -91,3 +91,6 @@
 [submodule "roles/do1jlr.ovh_dyndns"]
 	path = roles/do1jlr.ovh_dyndns
 	url = https://github.com/DO1JLR/ansible_role_ovh_dyndns.git
+[submodule "roles/do1jlr.rtl_nic_firmware"]
+	path = roles/do1jlr.rtl_nic_firmware
+	url = https://github.com/DO1JLR/ansible_role_rtl_nic_firmware.git
diff --git a/roles/do1jlr.base b/roles/do1jlr.base
index 0efb03d..609bf05 160000
--- a/roles/do1jlr.base
+++ b/roles/do1jlr.base
@@ -1 +1 @@
-Subproject commit 0efb03d6414f5d4a52f0dc50a9d378418c8f91c3
+Subproject commit 609bf0508ffa47fd790442995ed13674b665f62e
diff --git a/roles/do1jlr.gitea b/roles/do1jlr.gitea
index e600087..cbba4f3 160000
--- a/roles/do1jlr.gitea
+++ b/roles/do1jlr.gitea
@@ -1 +1 @@
-Subproject commit e6000876e4d21d09322a3c4aa5da8b81380c08e4
+Subproject commit cbba4f33f6c66a3af1eab9b4e7d8efad96fa9804
diff --git a/roles/do1jlr.rtl_nic_firmware b/roles/do1jlr.rtl_nic_firmware
new file mode 160000
index 0000000..833d744
--- /dev/null
+++ b/roles/do1jlr.rtl_nic_firmware
@@ -0,0 +1 @@
+Subproject commit 833d7442fe46481aef7b6f502e0ee786522ef0b6
diff --git a/site.yml b/site.yml
index 2575fdd..fa9391e 100644
--- a/site.yml
+++ b/site.yml
@@ -11,6 +11,7 @@
     - {role: ranger, tags: [packages, ranger]}
     - {role: bat, tags: [packages, bat], when: [ansible_os_family == 'Debian']}
     - {role: unattended_upgrades, tags: [default, unattended, unattended_upgrades, security], become: true, when: ansible_distribution == 'Debian'}
+    - {role: do1jlr.rtl_nic_firmware, tags: [apu, rtl_nic, firmware]}
 
 - name: user specific roles for all hosts
   hosts: all