diff --git a/roles/koschei/tasks/main.yml b/roles/koschei/tasks/main.yml
index 8892b70e93..9872d5e5a0 100644
--- a/roles/koschei/tasks/main.yml
+++ b/roles/koschei/tasks/main.yml
@@ -6,13 +6,16 @@
   - koschei
   - packages
 
-- name: install config.cfg
+- name: install config files
   template: >
-    src="config.cfg.j2"
-    dest="/etc/koschei/config.cfg"
+    src="{{ item }}.j2"
+    dest="/etc/koschei/{{ item }}"
     owner=koschei
     group=koschei
     mode=0400
+  with_items:
+  - config.cfg
+  - config-admin.cfg
   notify:
   - restart koschei-polling
   - restart koschei-resolver
diff --git a/roles/koschei/templates/config-admin.cfg.j2 b/roles/koschei/templates/config-admin.cfg.j2
new file mode 100644
index 0000000000..e4d81b0bec
--- /dev/null
+++ b/roles/koschei/templates/config-admin.cfg.j2
@@ -0,0 +1,14 @@
+# Config for operations that require koscheiadmin credentials.
+# To use this config you need to set env variable:
+# KOSCHEI_CONFIG=/usr/share/koschei/config.cfg:/etc/koschei/config.cfg:/etc/koschei/config-admin.cfg
+config = {
+    "database_config": {
+        "username": "koscheiadmin",
+        "password": "{{ koscheiadmin_db_password }}",
+    }
+}
+
+# Local Variables:
+# mode: Python
+# End:
+# vi: ft=python