diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml
index e2c80abb63..0052b68b26 100644
--- a/playbooks/include/proxies-reverseproxy.yml
+++ b/playbooks/include/proxies-reverseproxy.yml
@@ -504,3 +504,12 @@
     destname: faf
     proxyurl: http://localhost:10050
     when: env == "staging"
+
+  - role: httpd/reverseproxy
+    website: apps.fedoraproject.org
+    destname: pps
+    remotepath: /pps
+    localpath: /pps
+    proxyurl: http://localhost:10051
+    when: env == "staging"
+
diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg
index fde1846b7b..061b9f9dda 100644
--- a/roles/haproxy/templates/haproxy.cfg
+++ b/roles/haproxy/templates/haproxy.cfg
@@ -308,6 +308,13 @@ listen faf 0.0.0.0:10050
     server faf01 faf01:80 check inter 10s rise 1 fall 2
 {% endif %}
 
+{% if env == "staging" %}
+listen  pps 0.0.0.0:10051
+    balance hdr(appserver)
+    server  mdapi01 mdapi01:8080 check inter 10s rise 1 fall 2
+    option  httpchk GET /pps
+
+{% endif %}
 # Apache doesn't handle the initial connection here like the other proxy
 # entries.  This proxy also doesn't use the http mode like the others.
 # stunnel should be sitting on port 9939 (public) and redirecting