diff --git a/inventory/group_vars/copr-keygen-stg b/inventory/group_vars/copr-keygen-stg
index cde6565526..cea9d8bfa3 100644
--- a/inventory/group_vars/copr-keygen-stg
+++ b/inventory/group_vars/copr-keygen-stg
@@ -3,10 +3,10 @@ copr_hostbase: copr-keygen-dev
 tcp_ports: []
 
 # http + signd dest ports
-custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.217 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.155.215 --dport 80 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.32.217 --dport 5167 -j ACCEPT',
-                '-A INPUT -p tcp -m tcp -s 172.25.155.215 --dport 5167 -j ACCEPT']
+custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.232 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.157.237 --dport 80 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.32.232 --dport 5167 -j ACCEPT',
+                '-A INPUT -p tcp -m tcp -s 172.25.157.237 --dport 5167 -j ACCEPT']
 
 datacenter: cloud
 
diff --git a/inventory/group_vars/copr-stg b/inventory/group_vars/copr-stg
index ba54a93df9..4c222bc6dd 100644
--- a/inventory/group_vars/copr-stg
+++ b/inventory/group_vars/copr-stg
@@ -5,8 +5,8 @@ _forward_src: "forward_dev"
 
 # don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
 
-copr_backend_ips: ["172.25.32.217", "172.25.155.215"]
-keygen_host: "172.25.32.205"
+copr_backend_ips: ["172.25.32.232", "172.25.157.237"]
+keygen_host: "172.25.32.238"
 
 resolvconf: "resolv.conf/cloud"