diff --git a/roles/ipsilon/templates/ipsilon-httpd.conf.j2 b/roles/ipsilon/templates/ipsilon-httpd.conf.j2
index 7d9f65bae8..a2b1e72370 100644
--- a/roles/ipsilon/templates/ipsilon-httpd.conf.j2
+++ b/roles/ipsilon/templates/ipsilon-httpd.conf.j2
@@ -31,11 +31,7 @@ WSGIRestrictSignal Off
 
 <Location /login/gssapi/negotiate>
     AuthName "GSSAPI Single Sign On Login"
-{% if env == "staging" %}
-    GssapiCredStore keytab:/etc/krb5.HTTP_id.stg.fedoraproject.org.keytab
-{% else %}
-    GssapiCredStore keytab:/etc/krb5.HTTP_id.fedoraproject.org.keytab
-{% endif %}
+    GssapiCredStore keytab:/etc/keytabs/ipsilon-keytab
     AuthType GSSAPI
     # This is off because Apache (and thus mod_auth_gssapi) doesn't know this is proxied over TLS
     GssapiSSLonly Off