diff --git a/.config/ansible-lint.yml b/.config/ansible-lint.yml
new file mode 100644
index 0000000..d16ac80
--- /dev/null
+++ b/.config/ansible-lint.yml
@@ -0,0 +1,3 @@
+skip_list:
+    - yaml[indentation]
+    - package-latest
diff --git a/README b/README
index 5be922d..51822d2 100644
--- a/README
+++ b/README
@@ -10,6 +10,7 @@ Ansible playbooks of the University of Waterloo Computer Science Club.
 If a playbook is not in this list, it is not guaranteed to work.
 - [x] test-playbook.yml
 - [x] gather-ssh-fingerprints.yml
+- [x] upgrade-ceo.yml
 
 ** Deps **
 1. Install pipx
diff --git a/inventory.yaml b/inventory.yaml
index 27fceec..8d76674 100644
--- a/inventory.yaml
+++ b/inventory.yaml
@@ -68,6 +68,7 @@ syscom_containers:
         chat.csclub.uwaterloo.ca:
         coffee.csclub.uwaterloo.ca:
         mail.csclub.uwaterloo.ca:
+        mailman.csclub.uwaterloo.ca:
         munin.csclub.uwaterloo.ca:
         rt.csclub.uwaterloo.ca:
         dns1.csclub.uwaterloo.ca:
@@ -78,6 +79,14 @@ syscom_containers:
         prometheus.csclub.uwaterloo.ca:
         progcom.csclub.uwaterloo.ca:
 
+
+ceod_machines:
+    hosts:
+        phosphoric-acid.csclub.uwaterloo.ca:
+        biloba.csclub.uwaterloo.ca:
+        caffeine.csclub.uwaterloo.ca:
+        mailman.csclub.uwaterloo.ca:
+
 audio_sink:
     hosts:
         nullsleep.csclub.uwaterloo.ca:
diff --git a/upgrade-ceo.yml b/upgrade-ceo.yml
new file mode 100644
index 0000000..ddd7a72
--- /dev/null
+++ b/upgrade-ceo.yml
@@ -0,0 +1,27 @@
+- name: Update ceod
+  hosts: ceod_machines
+  become: true
+
+  tasks:
+  - name: update ceod package
+    ansible.builtin.apt:
+      name: ceod
+      state: latest
+      update_cache: true
+      only_upgrade: true
+  - name: restart ceod service
+    ansible.builtin.systemd:
+      name: ceod
+      state: restarted
+
+- name: Update ceo
+  hosts: all
+  become: true
+
+  tasks:
+  - name: update ceo package
+    ansible.builtin.apt:
+      name: ceo
+      state: latest
+      update_cache: true
+      only_upgrade: true