diff --git a/inventory/group_vars/openqa_lab_workers b/inventory/group_vars/openqa_lab_workers
index 2de4f878e1..95f5d6efc7 100644
--- a/inventory/group_vars/openqa_lab_workers
+++ b/inventory/group_vars/openqa_lab_workers
@@ -24,3 +24,5 @@ openqa_repo: updates-testing
 openqa_secret: "{{ stg_openqa_apisecret }}"
 openqa_workers: 4
 primary_auth_source: ipa
+# all worker hosts should be encrypted as of 2024-10 redeployment
+openqa_nbde: true