diff --git a/group_vars/all/root_access.yml b/group_vars/all/root_access.yml
index b77e26a332a078115163839f0e03d261a9a9675c..8ee52ab74f8001703114b56b786cef35143700d4 100644
--- a/group_vars/all/root_access.yml
+++ b/group_vars/all/root_access.yml
@@ -27,6 +27,7 @@ root_ssh_keys:
       - bugs.archlinux.org
       - wiki.archlinux.org
       - man.archlinux.org
+      - gitlab.archlinux.org
 
 # - run 'playbooks/tasks/reencrypt-vault-{super,default}-key.yml' when this
 #   changes; before doing so, make sure to 'gpg --lsign-key' all listed keys