diff --git a/roles/haproxy/templates/haproxy.cfg b/roles/haproxy/templates/haproxy.cfg
index be1e5b5d42..cda10abc5e 100644
--- a/roles/haproxy/templates/haproxy.cfg
+++ b/roles/haproxy/templates/haproxy.cfg
@@ -340,7 +340,7 @@ listen  ipa 0.0.0.0:10053
     balance hdr(appserver)
     server  ipa01 ipa01:443 check inter 10s rise 1 fall 2 ssl verify required ca-file /etc/haproxy/ipa.pem
 {% if env != "staging" %}
-    server  ipa02 ipa02:443 check inter 10s rise 1 fall 2 ssl verify required ca-file /etc/haproxy/ipa.pem
+    server  ipa02 ipa02:443 check inter 10s rise 1 fall 2 ssl verify required ca-file /etc/haproxy/ipa.pem backup
 {% endif %}
     option  httpchk GET /ipa/ui/
 
@@ -354,7 +354,7 @@ listen krb5 0.0.0.0:1088
     timeout connect 86400000
     server  ipa01 ipa01:88 weight 1 maxconn 16384
 {% if env == "production" %}
-    server  ipa02 ipa02:88 weight 1 maxconn 16384
+    # server  ipa02 ipa02:88 weight 1 maxconn 16384
 {% endif %}
 
 listen docker-candidate-registry 0.0.0.0:10054