diff --git a/basics.yml b/basics.yml
index f5c0161..453f4c2 100644
--- a/basics.yml
+++ b/basics.yml
@@ -105,6 +105,31 @@
         install_recommends: no
       when: ansible_distribution_release is match("bookworm")
 
+    - name: set testing repo pinning for Debian 12 - bookworm (needed by dnscrypt-proxy)
+      blockinfile:
+        path: /etc/apt/preferences.d/pinning.pref
+        create: yes
+        mode: "0444"
+        owner: root
+        group: root
+        marker: "# {mark} ANSIBLE MANAGED BLOCK"
+        block: |
+          Package: *
+          Pin: release a=stable
+          Pin-Priority: 900
+          
+          Package: *
+          Pin: release a=testing
+          Pin-Priority: 100
+      when: ansible_distribution_release is match("bookworm")
+
+    - name: add testing repo for Debian 12 - bookworm (needed by dnscrypt-proxy)
+      ansible.builtin.apt_repository:
+        repo: "deb https://deb.debian.org/debian/ testing main"
+        state: present
+        filename: testing
+      when: ansible_distribution_release is match("bookworm")
+
     - name: check if this is a mint system
       stat: 
         path: /etc/linuxmint/mintSystem.conf