diff --git a/inventory/group_vars/colo-virt b/inventory/group_vars/colo-virt
index d7aff060d9..4f5a8f77bd 100644
--- a/inventory/group_vars/colo-virt
+++ b/inventory/group_vars/colo-virt
@@ -1,2 +1,3 @@
 ---
 virthost: true
+vpn: true
diff --git a/playbooks/groups/virthost.yml b/playbooks/groups/virthost.yml
index f6a22e02ea..52abc60cae 100644
--- a/playbooks/groups/virthost.yml
+++ b/playbooks/groups/virthost.yml
@@ -26,7 +26,7 @@
   - collectd/base
   - { role: iscsi_client, when: "inventory_hostname.startswith(('bvirthost', 'buildvmhost'))" }
   - sudo
-  - { role: openvpn/client, when: datacenter != "phx2" or datacenter != "cloud" }
+  - { role: openvpn/client, when: vpn }
   - virthost
 
   tasks: