diff --git a/roles/ext_mail/mailjet/defaults/main.yml b/roles/ext_mail/mailjet/defaults/main.yml
new file mode 100644
index 0000000..c435121
--- /dev/null
+++ b/roles/ext_mail/mailjet/defaults/main.yml
@@ -0,0 +1,33 @@
+---
+
+# domain: example.com
+
+# MailJet will assign a unique verification record which name and data must be given in these variables
+# e.g. the record 'mailjet._12345678.example.com TXT "abcdefghijklmnopqrstuvwxyz123456"'
+# resolves to name="12345678" and data="abcdefghijklmnopqrstuvwxyz123456"
+# verification_name: 12345678
+# verification_data: abcdefghijklmnopqrstuvwxyz123456
+
+spf_redirect_domain: "spf.mailjet.com"
+
+dkim_key_name: mailjet
+dkim_key_data: >-
+  "v=DKIM1; k=rsa; "
+  "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDrA+r6R11vE4/FMWpgOzNWn5"
+  "JIzn7/y88DTla9DZvfpbcBFGEKDqhArsa+t9V34TdFzpIss4T80F1C7BrGWnwo46"
+  "I7rk2y5ee9Ga3iwG5EyilrXF10hw+qk2EsTKdAHld0x24vnzW/tFWfF47eu4ricY"
+  "/KuIrjXQ4Xs23eCNw6vQIDAQAB"
+
+dmarc_policy: "v=DMARC1;p=none"
+
+# derived DNS record data
+# names are relative to domain
+
+verification_record_name: "mailjet._{{ verification_name }}"
+verification_record_data: "{{ verification_data }}"
+spf_record_name: "@"
+spf_record_data: "v=spf1 include:{{ spf_redirect_domain }} -all"
+dkim_record_name: "{{ dkim_key_name }}._domainkey"
+dkim_record_data: "{{ dkim_key_data }}"
+dmarc_record_name: "_dmarc"
+dmarc_record_data: "{{ dmarc_policy }}"
diff --git a/roles/ext_mail/mailjet/meta/main.yml b/roles/ext_mail/mailjet/meta/main.yml
new file mode 100644
index 0000000..2a9d99c
--- /dev/null
+++ b/roles/ext_mail/mailjet/meta/main.yml
@@ -0,0 +1,20 @@
+---
+
+allow_duplicates: yes
+
+dependencies:
+  - role: dns/entries
+    # domain
+    entries:
+      - domain: "{{ verification_record_name }}"
+        type: TXT
+        data: "{{ verification_record_data }}"
+      - domain: "{{ spf_record_name }}"
+        type: TXT
+        data: "{{ spf_record_data }}"
+      - domain: "{{ dkim_record_name }}"
+        type: TXT
+        data: "{{ dkim_record_data }}"
+      - domain: "{{ dmarc_record_name }}"
+        type: TXT
+        data: "{{ dmarc_record_data }}"