diff --git a/roles/postgresql_server_bdr/templates/pg_hba.conf b/roles/postgresql_server_bdr/templates/pg_hba.conf
index eb4f52df90..ce524486bd 100644
--- a/roles/postgresql_server_bdr/templates/pg_hba.conf
+++ b/roles/postgresql_server_bdr/templates/pg_hba.conf
@@ -76,6 +76,10 @@ host all all 0.0.0.0 0.0.0.0 md5
 # Note, I can't think of a reason to make this more restrictive than ipv4 but
 # only fakefas needs it so far
 host all all ::1/128 md5
+host     all             all             10.5.126.188/32      trust
+host     all             all             10.5.126.189/32      trust
+host     replication     all             10.5.126.188/32      trust
+host     replication     all             10.5.126.189/32      trust
 # staging replication hosts
 {% for host in groups['pgbdr-stg']|sort %}
 {% if 'eth0_ip' in hostvars[host] %}# {{ host }}
@@ -90,7 +94,3 @@ host     replication    all             {{ hostvars[host]['eth0_ip'] }}/32 md5
 {% else %}# {{ host }} has no 'eth0_ip' listed
 {% endif %}
 {% endfor %}
-host     all             all             10.5.126.188/32      trust
-host     all             all             10.5.126.189/32      trust
-host     replication     all             10.5.126.188/32      trust
-host     replication     all             10.5.126.189/32      trust