diff --git a/defaults/main.yml b/defaults/main.yml
index faa6e9d..3456289 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -14,6 +14,8 @@ vaultwarden_http_port: 8222
 vaultwarden_data_location: "{{ cloud_storage }}/vaultwarden-data"
 
 vaultwarden_signups_allowed: false
+#comma separated domains that may sign up even with sign ups disabled
+vaultwarden_signups_domains_whitelist: ""
 vaultwarden_signups_verify: true
 vaultwarden_invitations_allowed: true
 vaultwarden_invitation_org_name: "Vaultwarden"
diff --git a/templates/opt/vaultwarden/.env.j2 b/templates/opt/vaultwarden/.env.j2
index 186a905..4581967 100644
--- a/templates/opt/vaultwarden/.env.j2
+++ b/templates/opt/vaultwarden/.env.j2
@@ -4,6 +4,9 @@ LOG_LEVEL={{ vaultwarden_loglevel }}
 IP_HEADER=X-Real-IP
 
 SIGNUPS_ALLOWED={{ vaultwarden_signups_allowed | bool | lower }}
+{% if vaultwarden_signups_domains_whitelist %}
+SIGNUPS_DOMAINS_WHITELIST={{ vaultwarden_signups_domains_whitelist }}
+{% endif %}
 SIGNUPS_VERIFY={{ vaultwarden_signups_verify | bool | lower }}
 INVITATIONS_ALLOWED={{ vaultwarden_invitations_allowed | bool | lower }}
 INVITATION_ORG_NAME={{ vaultwarden_invitation_org_name }}