diff --git a/inventory/group_vars/bodhi b/inventory/group_vars/bodhi
index 9909650ff8..cdf09d1b60 100644
--- a/inventory/group_vars/bodhi
+++ b/inventory/group_vars/bodhi
@@ -7,8 +7,7 @@ lvm_size: 40000
 mem_size: 4096
 num_cpus: 2
 
-# for systems that do not match the above - specify the same parameter in
-# the host_vars/$hostname file
+# for systems that do not match the above - specify the same parameter in # the host_vars/$hostname file
 
 tcp_ports: [ 80, 443,
     # These 16 ports are used by fedmsg.  One for each wsgi thread.
@@ -28,3 +27,30 @@ fedmsg_certs:
 - service: bodhi
   owner: root
   group: bodhi
+  can_send:
+  - bodhi.buildroot_override.tag
+  - bodhi.buildroot_override.untag
+  - bodhi.stack.delete
+  - bodhi.stack.save
+  - bodhi.update.comment
+  - bodhi.update.complete.testing
+  - bodhi.update.edit
+  - bodhi.update.karma.threshold
+  - bodhi.update.request.obsolete
+  - bodhi.update.request.revoke
+  - bodhi.update.request.stable
+  - bodhi.update.request.testing
+  - bodhi.update.request.unpush
+
+  # Things that only the mash does - not the web UI
+  #- bodhi.mashtask.complete
+  #- bodhi.mashtask.mashing
+  #- bodhi.mashtask.start
+  #- bodhi.mashtask.sync.done
+  #- bodhi.mashtask.sync.wait
+  #- bodhi.errata.publish
+  #- bodhi.update.eject
+
+  # Rsync messages that get run from somewhere else entirely.
+  #- bodhi.updates.epel.sync
+  #- bodhi.updates.fedora.sync
diff --git a/inventory/group_vars/bodhi-stg b/inventory/group_vars/bodhi-stg
index 9909650ff8..329ad6aa04 100644
--- a/inventory/group_vars/bodhi-stg
+++ b/inventory/group_vars/bodhi-stg
@@ -28,3 +28,30 @@ fedmsg_certs:
 - service: bodhi
   owner: root
   group: bodhi
+  can_send:
+  - bodhi.buildroot_override.tag
+  - bodhi.buildroot_override.untag
+  - bodhi.stack.delete
+  - bodhi.stack.save
+  - bodhi.update.comment
+  - bodhi.update.complete.testing
+  - bodhi.update.edit
+  - bodhi.update.karma.threshold
+  - bodhi.update.request.obsolete
+  - bodhi.update.request.revoke
+  - bodhi.update.request.stable
+  - bodhi.update.request.testing
+  - bodhi.update.request.unpush
+
+  # Things that only the mash does - not the web UI
+  #- bodhi.mashtask.complete
+  #- bodhi.mashtask.mashing
+  #- bodhi.mashtask.start
+  #- bodhi.mashtask.sync.done
+  #- bodhi.mashtask.sync.wait
+  #- bodhi.errata.publish
+  #- bodhi.update.eject
+
+  # Rsync messages that get run from somewhere else entirely.
+  #- bodhi.updates.epel.sync
+  #- bodhi.updates.fedora.sync