diff --git a/hetzner/autoinstall/tasks/main.yml b/hetzner/autoinstall/tasks/main.yml
index 273347a..7780099 100644
--- a/hetzner/autoinstall/tasks/main.yml
+++ b/hetzner/autoinstall/tasks/main.yml
@@ -23,3 +23,7 @@
 
   - name: reboot
     reboot:
+
+- name: unlock disk
+  raw: "echo {{ autoinstall_disk_encryption secret }} | cryptroot-unlock"
+  when: hetzner_autoinstall|default(false) or disk_unlock|default(false)