diff --git a/roles/rsync-client/templates/rsyncd.conf.j2 b/roles/rsync-client/templates/rsyncd.conf.j2
index f8f3680b..eab22931 100644
--- a/roles/rsync-client/templates/rsyncd.conf.j2
+++ b/roles/rsync-client/templates/rsyncd.conf.j2
@@ -42,6 +42,25 @@ auth users = backupcrans
 secrets file = /etc/rsyncd.secrets
 hosts allow = zephir.adm.crans.org 10.231.136.6
 
-{# TODO: implémenter le vrai système comme dans BCFG2 #}
-{# TODO: implémenter le cas particulier de main-ftp-server, cpasswords-main et wiki #}
+{# rsync readonly pour le miroir #}
+{% if ansible_hostname == "charybde" %}
+[ftp]
+path = /pubftp
+comment = CRANS FTP
+uid = nobody
+gid = nogroup
+hosts allow = *
+read only = yes
+
+[videolan]
+path = /pubftp/videolan
+comment = VideoLAN repository
+uid = nobody
+gid = nogroup
+hosts allow = *
+read only = yes
+{% endif %}
+
+{# TODO: implémenter le vrai système comme dans BCFG2 #}
+{# TODO: implémenter le cas particulier cpasswords-main et wiki #}