diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8582054f..ddaa426f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -31,6 +31,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * openvpn: use a subnet topology instead of the net30 default topology
 * tomcat: Tomcat 9 by default with Debian 11
 * openvpn: use a local copy of files instead of cloning an external git repository
+* vrrpd: Store sysctl values in specific file
 
 ### Fixed
 
diff --git a/vrrpd/tasks/main.yml b/vrrpd/tasks/main.yml
index 74dfa5c2..5804cb39 100644
--- a/vrrpd/tasks/main.yml
+++ b/vrrpd/tasks/main.yml
@@ -3,6 +3,8 @@
   include_role:
     name: evolix/apt
     tasks_from: evolix_public.yml
+  tags:
+    - vrrpd
 
 - name: Install vrrpd packages
   apt:
@@ -10,12 +12,13 @@
     allow_unauthenticated: yes
     state: present
   tags:
-  - vrrpd
+    - vrrpd
 
 - name: Adjust sysctl config
   sysctl:
     name: "{{ item.name }}"
     value: "{{ item.value }}"
+    sysctl_file: /etc/sysctl.d/vrrpd.conf
     sysctl_set: yes
     state: present
   loop:
@@ -26,4 +29,4 @@
     - { name: 'net.ipv4.conf.all.arp_announce', value: 2 }
     - { name: 'net.ipv4.ip_nonlocal_bind', value: 1 }
   tags:
-  - vrrpd
+    - vrrpd