diff --git a/files/ldap-stg/bootstrap/40-ppolicy.ldif b/files/ldap-stg/bootstrap/40-ppolicy.ldif
new file mode 100644
index 0000000..f240a28
--- /dev/null
+++ b/files/ldap-stg/bootstrap/40-ppolicy.ldif
@@ -0,0 +1,4 @@
+dn: cn=module{0},cn=config
+changetype: modify
+add: olcModuleLoad
+olcModuleLoad: ppolicy
diff --git a/files/ldap-stg/bootstrap/95-ppolicy.ldif b/files/ldap-stg/bootstrap/95-ppolicy.ldif
new file mode 100644
index 0000000..d3b47ba
--- /dev/null
+++ b/files/ldap-stg/bootstrap/95-ppolicy.ldif
@@ -0,0 +1,6 @@
+dn: olcOverlay=ppolicy,olcDatabase={1}{{ LDAP_BACKEND }},cn=config
+objectClass: olcPpolicyConfig
+olcOverlay: ppolicy
+olcPPolicyDefault: cn=ppolicy,{{ LDAP_BASE_DN }}
+olcPPolicyUseLockout: FALSE
+olcPPolicyHashCleartext: TRUE