diff --git a/inventory/host_vars/anitya-backend01.fedoraproject.org b/inventory/host_vars/anitya-backend01.fedoraproject.org
index 499ddd72ed..6ab9f27883 100644
--- a/inventory/host_vars/anitya-backend01.fedoraproject.org
+++ b/inventory/host_vars/anitya-backend01.fedoraproject.org
@@ -7,6 +7,7 @@ volgroup: /dev/vg_guests
 
 eth0_ip: 140.211.169.230
 ansible_ssh_host: anitya-backend01.fedoraproject.org
+fedmsg_fqdn: anitya-backend01.vpn.fedoraproject.org
 
 postfix_group: vpn
 
diff --git a/inventory/host_vars/anitya-frontend01.fedoraproject.org b/inventory/host_vars/anitya-frontend01.fedoraproject.org
index 887474d29c..be9cc6ca3e 100644
--- a/inventory/host_vars/anitya-frontend01.fedoraproject.org
+++ b/inventory/host_vars/anitya-frontend01.fedoraproject.org
@@ -9,6 +9,7 @@ volgroup: /dev/vg_guests
 
 eth0_ip: 140.211.169.229
 ansible_ssh_host: anitya-frontend01.fedoraproject.org
+fedmsg_fqdn: anitya-frontend01.vpn.fedoraproject.org
 
 postfix_group: vpn
 
diff --git a/roles/fedmsg/base/templates/ssl.py.j2 b/roles/fedmsg/base/templates/ssl.py.j2
index ab3e6c3499..8a28e55256 100644
--- a/roles/fedmsg/base/templates/ssl.py.j2
+++ b/roles/fedmsg/base/templates/ssl.py.j2
@@ -187,10 +187,10 @@ config = dict(
         ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
         ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" % suffix),
 
-        ("shell.anitya-frontend01", "shell-anitya-frontend01.fedoraproject.org"),
-        ("anitya.anitya-frontend01", "anitya-anitya-frontend01.fedoraproject.org"),
-        ("shell.anitya-backend01", "shell-anitya-backend01.fedoraproject.org"),
-        ("anitya.anitya-backend01", "anitya-anitya-backend01.fedoraproject.org"),
+        ("shell.anitya-frontend01", "shell-anitya-frontend01.vpn.fedoraproject.org"),
+        ("anitya.anitya-frontend01", "anitya-anitya-frontend01.vpn.fedoraproject.org"),
+        ("shell.anitya-backend01", "shell-anitya-backend01.vpn.fedoraproject.org"),
+        ("anitya.anitya-backend01", "anitya-anitya-backend01.vpn.fedoraproject.org"),
 
         # FAF/retrace is on the qa network and talks to an inbound relay.
         ("shell.retrace01", "shell-retrace01.qa.fedoraproject.org"),