diff --git a/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml b/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
index 3856880805..8d4ab84188 100644
--- a/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
+++ b/playbooks/hosts/copr-fe.cloud.fedoraproject.org.yml
@@ -25,19 +25,23 @@
   - include: $tasks/cloud_setup_basic.yml
   - name: mount up disk of copr fe
     action: mount name=/srv/copr-fe src='LABEL=copr-fe' fstype=ext4 state=mounted
+  - include: $tasks/iptables.yml
 
   - name: mount up bind mount for postgres
     action: mount src=/srv/copr-fe/pgsqldb name=/var/lib/pgsql fstype=auto opts=bind state=mounted
+  # we could not use ourself repo :(
+  #- name: copy copr.repo
+  #  action: copy src=$files/copr/fe/yum/copr.repo dest=/etc/yum.repos.d/copr.repo
 
   - name: install copr-fe pkgs
-    action: yum state=installed name=$item
+    action: yum state=installed pkg=$item
     with_items:
-    - httpd
-    - mod_wsgi
-    - postgresql
-    - bash-completion
+    - copr-frontend
+    - copr-selinux
     - postgresql-server
-    - git
+    - bash-completion
+    tags:
+    - packages
 
   - name: copy apache files to conf.d
     action: copy src=$files/copr/fe/httpd/$item dest=/etc/httpd/conf.d/$item
@@ -45,21 +49,14 @@
     - coprs.conf
     - welcome.conf
 
-   
-  - name: start services
+  - name: copy pg_hba.conf
+    action: copy src=$files/copr/fe/pg/pg_hba.conf dest=/var/lib/pgsql/data/pg_hba.conf owner=postgres group=postgres mode=0600
+  
+  - name: enable services
     action: service state=running enabled=yes name=$item
     with_items:
     - httpd
     - postgresql
 
-
-  # open up ports (22, 80, 443)
-  - name: poke holes in the firewall
-    action: command lokkit $item
-    with_items:
-    - --service=ssh
-    - --service=https
-    - --service=http
-
   handlers:
   - include: $handlers/restart_services.yml