diff --git a/inventory/host_vars/openqa-x86-worker04.iad2.fedoraproject.org b/inventory/host_vars/openqa-x86-worker04.iad2.fedoraproject.org
new file mode 100644
index 0000000000..f3a4229736
--- /dev/null
+++ b/inventory/host_vars/openqa-x86-worker04.iad2.fedoraproject.org
@@ -0,0 +1,36 @@
+---
+freezes: false
+fas_client_groups: sysadmin-qa,sysadmin-main
+sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
+
+nrpe_procs_warn: 1400
+nrpe_procs_crit: 1600
+
+# the if connected to the infra network on this box is em1
+ansible_ifcfg_infra_net_devices: [ 'em1' ]
+eno1_ip: 10.3.174.24
+eno1_nm: 255.255.255.0
+gw: 10.3.174.254
+
+# openQA tap worker hosts (like this one) do stuff with ifcfg that base
+# doesn't understand. terrible, terrible stuff. seriously - it doesn't
+# handle the openvswitch config well. so let's tell it to just configure
+# the regular interfaces (which on this system is em1-4) for us,
+# disabling all but the one we want to use (em1), and leave everything
+# else alone. We use a variable definition here so the firewall config
+# (in the openqa_tap_workers group_vars) can reuse it.
+openqa_tap_iface: eno1
+ansible_ifcfg_allowlist: ['{{ openqa_tap_iface }}', 'eno2', 'eno3', 'eno4']
+ansible_ifcfg_disabled: ['eno2', 'eno3', 'eno4']
+
+# Has a hardware RNG
+openqa_rngd: True
+
+# this is a powerful machine, can handle more openQA workers
+openqa_workers: 30
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083', '20093', '20103', '20113', '20123', '20133', '20143', '20153', '20163', '20173', '20183', '20193', '20203', '20213', '20223', '20233', '20243', '20253', '20263', '20273', '20283', '20293', '20303']
diff --git a/inventory/inventory b/inventory/inventory
index 9436f2d52c..7f9c1bb408 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -433,6 +433,7 @@ openqa01.iad2.fedoraproject.org
 [openqa_workers]
 openqa-x86-worker01.iad2.fedoraproject.org
 openqa-x86-worker02.iad2.fedoraproject.org
+openqa-x86-worker04.iad2.fedoraproject.org
 
 # openqa-stg and openqa-stg-workers are pseudo-stg, see group_vars/openqa-stg for more details
 [openqa_stg]
@@ -1351,6 +1352,7 @@ odcs-backend-releng01.iad2.fedoraproject.org
 odcs-frontend01.iad2.fedoraproject.org
 openqa-x86-worker01.iad2.fedoraproject.org
 openqa-x86-worker02.iad2.fedoraproject.org
+openqa-x86-worker04.iad2.fedoraproject.org
 openqa01.iad2.fedoraproject.org
 os-control01.iad2.fedoraproject.org
 os-master01.iad2.fedoraproject.org