diff --git a/playbooks/apps/bin.yaml b/playbooks/apps/bin.yaml
index b3812a1..90df744 100644
--- a/playbooks/apps/bin.yaml
+++ b/playbooks/apps/bin.yaml
@@ -129,3 +129,17 @@
       36623833376262313663633666393261636335653731303264643430613935386235333930363836
       33323735346565643438636466383937646233343935396536356233323938383335323838313863
       303064613333373261636564633533313965
+    downloader_lcl_username: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      66386336656362396461376535363234363062343065366366633164313439333035663436306530
+      3462656334383236303864333462336439653533343366630a353032616262383333393535363430
+      30623736313366333264653037633864343138626266356334316465653164306465396561343535
+      3037373936343761330a663132326465336461343661356365396538323864633339616163326565
+      3465
+    downloader_lcl_password: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      64326561383732393063363239303338353237313232666238393035343133656534623633653032
+      3664663732643466386232663662353737303462396564380a366538653364353964376365623030
+      34396239666462346132663964356139363762343063666433383863313264386635356639643363
+      3066373833386564630a653765313666363138646533376134666330656237366236376361353261
+      3539
diff --git a/playbooks/apps/esphome.yaml b/playbooks/apps/esphome.yaml
new file mode 100644
index 0000000..123b5a0
--- /dev/null
+++ b/playbooks/apps/esphome.yaml
@@ -0,0 +1,11 @@
+---
+- name: Esphome
+  hosts: servers
+  gather_facts: false
+  tasks:
+    - name: Docker
+      ansible.builtin.include_role:
+        name: docker
+
+  vars:
+    docker_app_name: esphome
diff --git a/playbooks/apps/files/esphome/docker-compose.yaml b/playbooks/apps/files/esphome/docker-compose.yaml
new file mode 100644
index 0000000..8d83f51
--- /dev/null
+++ b/playbooks/apps/files/esphome/docker-compose.yaml
@@ -0,0 +1,13 @@
+services:
+  esphome:
+    image: ghcr.io/esphome/esphome
+    volumes:
+      - ./config:/config
+      - /etc/localtime:/etc/localtime:ro
+    restart: always
+    tty: true
+    init: true
+#    privileged: true
+    network_mode: host # exposes :6052
+    env_file:
+      - esphome.env
diff --git a/playbooks/apps/files/esphome/esphome.env b/playbooks/apps/files/esphome/esphome.env
new file mode 100644
index 0000000..8d44f3b
--- /dev/null
+++ b/playbooks/apps/files/esphome/esphome.env
@@ -0,0 +1,10 @@
+$ANSIBLE_VAULT;1.1;AES256
+34353430393662613463396264323139363435383738623961663062363764326465326239623931
+3936303664643938353934636337636134653334646561330a373362323961316238383166633339
+30663730386234396564666161643637376661613530323435366662656334616135643438313066
+3331363462653161380a306165323961326239353865323532623963666165353334653565333563
+33343865333562373863363765643735373637636132326333356261353363326562623132393261
+65383762633935393934383264326336623566616363373139666430623463313031343938376632
+64356562383431373964303139323432373835313832616439356162393461616535356131613965
+65343733636637666464666565376232633063373537383238343765393630643531613935363065
+6138
diff --git a/playbooks/apps/templates/bin/download-lcl-checking.j2 b/playbooks/apps/templates/bin/download-lcl-checking.j2
new file mode 100755
index 0000000..5301129
--- /dev/null
+++ b/playbooks/apps/templates/bin/download-lcl-checking.j2
@@ -0,0 +1,5 @@
+#!/bin/bash
+set -euo pipefail
+
+pushd /mnt/data/paperless-ngx
+./downloader lcl-checking -o consume -u '{{downloader_lcl_username}}' -p '{{downloader_lcl_password}}' --headless
diff --git a/playbooks/system/cron.yaml b/playbooks/system/cron.yaml
index 45334b3..e2f40b0 100644
--- a/playbooks/system/cron.yaml
+++ b/playbooks/system/cron.yaml
@@ -106,3 +106,10 @@
         hour: 13
         day: 10
         job: /mnt/data/bin/healthcheck downloader /mnt/data/bin/download-shiva
+    - name: Cron - Download LCL bank statement
+      ansible.builtin.cron:
+        name: Download LCL bank statement
+        minute: 0
+        hour: 13
+        day: 10
+        job: /mnt/data/bin/healthcheck downloader /mnt/data/bin/download-lcl-checking