diff --git a/inventory/group_vars/resultsdb-stg b/inventory/group_vars/resultsdb-stg
index c092a7879a..452a86688b 100644
--- a/inventory/group_vars/resultsdb-stg
+++ b/inventory/group_vars/resultsdb-stg
@@ -24,5 +24,5 @@ resultsdb_db_port: 5432
 resultsdb_endpoint: '/resultsdb'
 resultsdb_fe_endpoint: '/'
 resultsdb_db_name: resultsdb
-
-tcp_ports: [ 80, 443 ]
+allowed_hosts:
+    - 10.5.124
diff --git a/roles/taskotron/resultsdb-backend/templates/resultsdb.conf.j2 b/roles/taskotron/resultsdb-backend/templates/resultsdb.conf.j2
index 675bf804cc..e28b81024e 100644
--- a/roles/taskotron/resultsdb-backend/templates/resultsdb.conf.j2
+++ b/roles/taskotron/resultsdb-backend/templates/resultsdb.conf.j2
@@ -13,7 +13,10 @@ WSGISocketPrefix run/wsgi
     WSGIScriptReloading On
     <IfModule mod_authz_core.c>
         # Apache 2.4
-        Require all granted
+        <RequireAny>
+            Require method GET
+            Require ip 127.0.0.1 ::1{% for host in allowed_hosts %} {{ host }}{% endfor %}
+        </RequireAny>
     </IfModule>
     <IfModule !mod_auth_core.c>
         Order allow,deny