diff --git a/inventory/group_vars/copr-dist-git-stg b/inventory/group_vars/copr-dist-git-stg
index 4e8368f0b2..502e4fc16a 100644
--- a/inventory/group_vars/copr-dist-git-stg
+++ b/inventory/group_vars/copr-dist-git-stg
@@ -1,7 +1,6 @@
 ---
 resolvconf: "resolv.conf/cloud"
 
-tcp_ports: [22, 80]
+tcp_ports: [22, 80, 443]
 datacenter: cloud
 freezes: false
-custom_rules: ['-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT']
diff --git a/inventory/group_vars/copr-keygen-stg b/inventory/group_vars/copr-keygen-stg
index 2b576f943a..082582668b 100644
--- a/inventory/group_vars/copr-keygen-stg
+++ b/inventory/group_vars/copr-keygen-stg
@@ -1,16 +1,14 @@
 ---
 resolvconf: "resolv.conf/cloud"
 
-devel: true
-
 copr_hostbase: copr-keygen-stg
 tcp_ports: []
 
 # http + signd dest ports
-#custom_rules: [ '-A INPUT -p tcp -m tcp -s 172.25.32.232 --dport 80 -j ACCEPT',
-#                '-A INPUT -p tcp -m tcp -s 172.25.157.237 --dport 80 -j ACCEPT',
-#                '-A INPUT -p tcp -m tcp -s 172.25.32.232 --dport 5167 -j ACCEPT',
-#                '-A INPUT -p tcp -m tcp -s 172.25.157.237 --dport 5167 -j ACCEPT']
+custom_rules: ['-A INPUT -p tcp -m tcp -s 172.25.33.9 --dport 80 -j ACCEPT',
+               '-A INPUT -p tcp -m tcp -s 172.25.151.227 --dport 80 -j ACCEPT',
+               '-A INPUT -p tcp -m tcp -s 172.25.33.9 --dport 5167 -j ACCEPT',
+               '-A INPUT -p tcp -m tcp -s 172.25.151.227 --dport 5167 -j ACCEPT']
 
 datacenter: cloud
 
diff --git a/inventory/group_vars/copr-stg b/inventory/group_vars/copr-stg
index f5af3f2bea..4f5be7d34d 100644
--- a/inventory/group_vars/copr-stg
+++ b/inventory/group_vars/copr-stg
@@ -5,8 +5,8 @@ _forward_src: "forward_dev"
 
 # don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
 
-copr_backend_ips: ["172.25.32.232", "172.25.157.237"]
-keygen_host: "172.25.32.238"
+copr_backend_ips: ["172.25.33.9", "172.25.151.227"]
+keygen_host: "172.25.33.12"
 
 backend_base_url: "http://copr-be-stg.fedorainfracloud.org"
 frontend_base_url: "https://copr.stg.fedoraproject.org"