diff --git a/playbooks/openshift-apps/fas.yml b/playbooks/openshift-apps/fas.yml
index 5d12574950..cc99f07000 100644
--- a/playbooks/openshift-apps/fas.yml
+++ b/playbooks/openshift-apps/fas.yml
@@ -84,6 +84,11 @@
     app: fas
     file: service-totpcgi.yml
     objectname: service-totpcgi.yml
+  - role: openshift/object
+    app: fas
+    file: service-totpcgi-vpn.yml
+    objectname: service-totpcgi-vpn.yml
+    when: env == "production"
   - role: openshift/route
     app: fas
     routename: fas
@@ -119,7 +124,7 @@
     routename: totpcgi-vpn
     host: "fas-all.vpn.fedoraproject.org"
     serviceport: totp
-    servicename: totpcgi
+    servicename: totpcgi-vpn
     termination_passthrough: true
     when: env == "production"
   - role: openshift/object
diff --git a/roles/openshift-apps/fas/files/service-totpcgi-vpn.yml b/roles/openshift-apps/fas/files/service-totpcgi-vpn.yml
new file mode 100644
index 0000000000..c34a4b4df9
--- /dev/null
+++ b/roles/openshift-apps/fas/files/service-totpcgi-vpn.yml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: totpcgi-vpn
+  labels:
+    app: fas
+    service: totpcgi-vpn
+  namespace: fas
+spec:
+  ports:
+    - name: totp
+      port: 8443
+      targetPort: 8443
+  selector:
+    deploymentconfig: totpcgi-vpn