diff --git a/group_vars/all/root_access.yml b/group_vars/all/root_access.yml
index b77e26a3..8ee52ab7 100644
--- a/group_vars/all/root_access.yml
+++ b/group_vars/all/root_access.yml
@@ -27,6 +27,7 @@ root_ssh_keys:
       - bugs.archlinux.org
       - wiki.archlinux.org
       - man.archlinux.org
+      - gitlab.archlinux.org
 
 # - run 'playbooks/tasks/reencrypt-vault-{super,default}-key.yml' when this
 #   changes; before doing so, make sure to 'gpg --lsign-key' all listed keys