diff --git a/roles/pfsense_upgrade/tasks/main.yml b/roles/pfsense_upgrade/tasks/main.yml
index b9c8027..62117b9 100644
--- a/roles/pfsense_upgrade/tasks/main.yml
+++ b/roles/pfsense_upgrade/tasks/main.yml
@@ -13,6 +13,12 @@
   ansible.builtin.import_tasks: update_check.yml
   tags: [always, check]
 
+# Config backup to webhook (before upgrade)
+- name: Include config backup to webhook
+  ansible.builtin.import_tasks: backup_webhook.yml
+  tags: [always, backup]
+  when: perform_upgrade | bool
+
 # CARP pre-upgrade (demotion)
 - name: Include CARP pre-upgrade logic
   ansible.builtin.import_tasks: carp_pre.yml