diff --git a/playbooks/groups/bastion.yml b/playbooks/groups/bastion.yml
index 091375f876..c2be1a81e7 100644
--- a/playbooks/groups/bastion.yml
+++ b/playbooks/groups/bastion.yml
@@ -13,10 +13,10 @@
   roles:
   - base
   - rkhunter
+  - ipa/client
   - openvpn/server
   - nagios_client
   - hosts
-  - ipa/client
   - sudo
   - collectd/base
   - packager_alias