diff --git a/tasks/install-repair-tools.yml b/tasks/install-repair-tools.yml
index 095042263e11e33c3ce9010193e9e7e1f08be1d1..eabc0ea124a8ef2381a8b57def8be5144a4180f6 100644
--- a/tasks/install-repair-tools.yml
+++ b/tasks/install-repair-tools.yml
@@ -28,6 +28,18 @@
     - "/etc/cit_tiff6_baseline_SLUB.cfg"
   notify: restart repairtools
 
+- name: install repairtool dependencies from local Debian repo server
+  ansible.builtin.apt:
+    name: [
+      '{{ item.package_name }}={{ item.version }}',
+    ]
+    # CAUTION!!! Always use "state: present". Due to version constraints, we do
+    #            not allow just any package version or automatic update
+    #            mechanisms. Autoupdates will make the repair tool crash!
+    state: present
+  loop: "{{ tool_versions_local }}"
+  tags: [apt, no-ci]
+
 - name: install repairtool (package dependencies are encoded in the package)
   ansible.builtin.apt:
     name: [
@@ -37,7 +49,7 @@
     #            not allow just any package version or automatic update
     #            mechanisms. Autoupdates will make the repair tool crash!
     state: present
-  loop: "{{ tool_versions }}"
+  loop: "{{ tool_versions_public }}"
   tags: [apt]
 
 - name: configure tool version pinning to avoid automatic nightly upgrades
diff --git a/vars/main.yml b/vars/main.yml
index 2fb523b49ad81c0bcfcf738f3e8ef7f28d0ec6a7..f74f6337d8e5f8908eb1db19028f4b1cd5d5a3c3 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -1,9 +1,11 @@
 ---
-tool_versions:
+tool_versions_local:
   - package_name: "checkit-tiff-upcoming"
     version: "1.4.1"
   - package_name: "fixit-tiff"
     version: "1.3.4"
+
+tool_versions_public:
   - package_name: "libtiff-tools"
     version: "4.2.0-1+deb11u1"
   - package_name: "libslub-lza-repair-perl"