diff --git a/playbooks/roles/mailman3/tasks/main.yaml b/playbooks/roles/mailman3/tasks/main.yaml
index 6bf6b7e2ce..ad798d2396 100644
--- a/playbooks/roles/mailman3/tasks/main.yaml
+++ b/playbooks/roles/mailman3/tasks/main.yaml
@@ -35,6 +35,15 @@
     group: 65533
     mode: '0755'
 
+- name: Copy our mailman-extra.cfg for mailman-core
+  template:
+    src: mailman-extra.cfg.j2
+    dest: /var/lib/mailman/core/mailman-extra.cfg
+    # TODO: undo for https://github.com/maxking/docker-mailman/issues/550
+    owner: 100
+    group: 65533
+    mode: '0644'
+
 - name: Ensure Mailman database volume directory exists
   file:
     state: directory
diff --git a/playbooks/roles/mailman3/templates/mailman-extra.cfg.j2 b/playbooks/roles/mailman3/templates/mailman-extra.cfg.j2
new file mode 100644
index 0000000000..1ef0a56256
--- /dev/null
+++ b/playbooks/roles/mailman3/templates/mailman-extra.cfg.j2
@@ -0,0 +1,6 @@
+[mailman]
+# This address is the "site owner" address.  Certain messages which must be
+# delivered to a human, but which can't be delivered to a list owner (e.g. a
+# bounce from a list owner), will be sent to this address.  It should point to
+# a human.
+site_owner: "root@{{ ansible_fqdn }}"