diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8526326..1248d2f9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,10 +18,11 @@ The **patch** part changes incrementally at each release.
 * evolinux-base: default value for "evolinux_ssh_group"
 * evolinux-base: install /sbin/deny
 * evolinux-base: on debian 10 and later, add noexec on /dev/shm
-evolinux-base: on debian 10 and later, add /usr/share/scripts in root's PATH
+* evolinux-base: on debian 10 and later, add /usr/share/scripts in root's PATH
 * generate-ldif: support MariaDB 10.3
 * haproxy: add a variable to keep the existing configuration
 * listupgrade: install old-kernel-autoremoval script
+* minifirewall: add a variable to force the check scripts update
 * mongodb: mongodb: compatibility with Debian 10
 * mysql-oracle: backport tasks from mysql role
 * mysql: activate binary logs by specifying log_bin path
diff --git a/minifirewall/defaults/main.yml b/minifirewall/defaults/main.yml
index 3f173962..f5719e3c 100644
--- a/minifirewall/defaults/main.yml
+++ b/minifirewall/defaults/main.yml
@@ -41,6 +41,8 @@ minifirewall_autostart: False
 minifirewall_restart_if_needed: True
 minifirewall_restart_force: False
 
+minifirewall_force_update_nrpe_scripts: False
+
 evomaintenance_hosts: []
 
 nagios_plugins_directory: "/usr/local/lib/nagios/plugins"
diff --git a/minifirewall/tasks/nrpe.yml b/minifirewall/tasks/nrpe.yml
index 20629ad0..ae7951e0 100644
--- a/minifirewall/tasks/nrpe.yml
+++ b/minifirewall/tasks/nrpe.yml
@@ -15,7 +15,7 @@
   copy:
     src: minifirewall_status
     dest: /usr/share/scripts/minifirewall_status
-    force: no
+    force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
     mode: "0700"
     owner: root
     group: root
@@ -32,7 +32,7 @@
   copy:
     src: check_minifirewall
     dest: "{{ nagios_plugins_directory }}/check_minifirewall"
-    force: no
+    force: "{{ minifirewall_force_update_nrpe_scripts | bool }}"
     mode: "0755"
     owner: root
     group: staff