diff --git a/playbooks/groups/notifs-backend.yml b/playbooks/groups/notifs-backend.yml
index 655cb1eee8..a38a6d5851 100644
--- a/playbooks/groups/notifs-backend.yml
+++ b/playbooks/groups/notifs-backend.yml
@@ -34,10 +34,10 @@
   roles:
   - base
   - rkhunter
-  - denyhosts
+  - { role: denyhosts, when: ansible_distribution_major_version != '7' }
+  - fas_client
   - nagios_client
   - hosts
-  - fas_client
   - collectd/base
   - fedmsg/base
   - sudo