diff --git a/playbooks/groups/copr-frontend.yml b/playbooks/groups/copr-frontend.yml
index 367e7ffb31..1f9c291b35 100644
--- a/playbooks/groups/copr-frontend.yml
+++ b/playbooks/groups/copr-frontend.yml
@@ -1,7 +1,6 @@
 - name: check/create instance
   #hosts: copr-front-stg:copr-front
-  #hosts: copr-front-stg
-  hosts: copr-fe-dev.cloud.fedoraproject.org
+  hosts: copr-front-stg
   user: root
   gather_facts: False
 
@@ -15,7 +14,7 @@
 
 
 - name: cloud basic setup
-  hosts: copr-back-stg
+  hosts: copr-front-stg
   vars_files:
    - /srv/web/infra/ansible/vars/global.yml
    - "{{ private }}/vars.yml"
@@ -25,8 +24,7 @@
 
 - name: provision instance
   #hosts: copr-front:copr-front-stg
-  #hosts: copr-front-stg
-  hosts: copr-fe-dev.cloud.fedoraproject.org
+  hosts: copr-front-stg
   user: root
   gather_facts: True
 
diff --git a/roles/anitya/backend/files/anitya.cron b/roles/anitya/backend/files/anitya.cron
index 036a48325f..9ba6e88d08 100644
--- a/roles/anitya/backend/files/anitya.cron
+++ b/roles/anitya/backend/files/anitya.cron
@@ -1,3 +1,3 @@
 # Checks bi-daily for new versions
 #
-10 */12 * * * root ANITYA_WEB_CONFIG=/etc/anitya/anitya.cfg /usr/bin/python2 /usr/share/anitya/anitya_cron.py
+10 */12 * * * root ANITYA_WEB_CONFIG=/etc/anitya/anitya.cfg /usr/local/bin/lock-wrapper /usr/bin/python2 /usr/share/anitya/anitya_cron.py
diff --git a/roles/anitya/backend/tasks/main.yml b/roles/anitya/backend/tasks/main.yml
index 0caf67986e..622eaff49e 100644
--- a/roles/anitya/backend/tasks/main.yml
+++ b/roles/anitya/backend/tasks/main.yml
@@ -108,5 +108,6 @@
   with_items:
   - { file: 'anitya.cron', location: /etc/cron.d }
   tags:
+  - cron
   - config
   - anitya_backend
diff --git a/roles/copr/backend/tasks/main.yml b/roles/copr/backend/tasks/main.yml
index 1ab18497ea..ad92eaa105 100644
--- a/roles/copr/backend/tasks/main.yml
+++ b/roles/copr/backend/tasks/main.yml
@@ -106,7 +106,7 @@
   - provision_config
 
 - name: put provisioning files
-  copy: src="provision/files" dest="/home/copr/provision/files"
+  synchronize: src="provision/files" dest="/home/copr/provision/"
   tags:
   - provision_config
 
diff --git a/roles/copr/backend/templates/copr-be.conf-dev b/roles/copr/backend/templates/copr-be.conf-dev
index dd25385fc6..705dcad18a 100644
--- a/roles/copr/backend/templates/copr-be.conf-dev
+++ b/roles/copr/backend/templates/copr-be.conf-dev
@@ -28,6 +28,8 @@ spawn_playbook=/home/copr/provision/builderpb.yml
 # default is /etc/copr/terminate_playbook.yml 
 terminate_playbook=/home/copr/provision/terminatepb.yml
 
+terminate_vars=vm_name
+
 # directory where jobs are stored
 # no defaults
 jobsdir=/var/lib/copr/jobs
diff --git a/roles/keyserver/files/sks.conf b/roles/keyserver/files/sks.conf
index f7963acd1a..bc359b3814 100644
--- a/roles/keyserver/files/sks.conf
+++ b/roles/keyserver/files/sks.conf
@@ -48,12 +48,15 @@ NameVirtualHost *:443
 <VirtualHost *:443>
         ServerAdmin sysadmin-keys-members@fedoraproject.org
         ServerName keys.fedoraproject.org
-	ServerAlias keys01.fedoraproject.org
+	ServerAlias keys02.fedoraproject.org
 
         SSLEngine on
         SSLCertificateFile /etc/pki/tls/wildcard-2014.fedoraproject.org.cert
 	SSLCertificateChainFile /etc/pki/tls/wildcard-2014.fedoraproject.org.intermediate.cert
         SSLCertificateKeyFile /etc/pki/tls/wildcard-2014.fedoraproject.org.key
+        SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
+	SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
+
 	ProxyPass / http://localhost:11371/
 	ProxyPassReverse / http://localhost:11371/
         SetEnv proxy-nokeepalive 1
@@ -68,6 +71,9 @@ NameVirtualHost *:443
         SSLEngine on
         SSLCertificateFile /etc/pki/tls/keys_fedoraproject_org.crt.pem
         SSLCertificateKeyFile /etc/pki/tls/keys_fedoraproject_org.key
+	SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
+	SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
+
         ProxyPass / http://localhost:11371/
         ProxyPassReverse / http://localhost:11371/
         SetEnv proxy-nokeepalive 1