diff --git a/tasks/main.yaml b/tasks/main.yaml
index 1f64cab..1ff1ce2 100644
--- a/tasks/main.yaml
+++ b/tasks/main.yaml
@@ -1,8 +1,21 @@
 ---
 
-- name: Install required python library cryptography
-  ansible.builtin.pip:
-    name: cryptography>=1.2.3
+- name: Include OS-specific variables
+  ansible.builtin.include_vars: "{{ lookup('first_found', params) }}"
+  vars:
+    params:
+      files:
+      - "{{ ansible_facts['distribution'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['distribution'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}_{{ ansible_facts['architecture'] }}.yaml"
+      - "{{ ansible_facts['os_family'] }}.yaml"
+      - main.yaml
+      paths:
+      - vars
+
+- name: Install required python libraries
+  ansible.builtin.package:
+    name: "{{ certificate_authority_python_packages }}"
     state: present
 
 - name: Create or import a root Certificate Authority (CA)
diff --git a/vars/Archlinux.yaml b/vars/Archlinux.yaml
new file mode 100644
index 0000000..6e52599
--- /dev/null
+++ b/vars/Archlinux.yaml
@@ -0,0 +1,4 @@
+---
+
+certificate_authority_python_packages:
+- python-cryptography
diff --git a/vars/main.yaml b/vars/main.yaml
new file mode 100644
index 0000000..6625c88
--- /dev/null
+++ b/vars/main.yaml
@@ -0,0 +1,6 @@
+---
+
+# Fallback for distributions without a dedicated vars file. Overridden by the
+# os-specific file included in tasks/main.yaml.
+certificate_authority_python_packages:
+- python3-cryptography