diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml
index 96b7467edd..2b70f77acf 100644
--- a/playbooks/include/proxies-reverseproxy.yml
+++ b/playbooks/include/proxies-reverseproxy.yml
@@ -648,6 +648,15 @@
     tags:
     - app.os.fedoraproject.org
 
+  - role: httpd/reverseproxy
+    website: "provision{{ env_suffix }}.fedoraproject.org"
+    destname: zezere
+    balancer_name: app-os
+    targettype: openshift
+    keephost: true
+    tags:
+    - zezere
+
   - role: httpd/reverseproxy
     website: odcs.fedoraproject.org
     destname: odcs
diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml
index 18b2bf5b0d..90290a90b4 100644
--- a/playbooks/include/proxies-websites.yml
+++ b/playbooks/include/proxies-websites.yml
@@ -619,6 +619,14 @@
     sslonly: true
     cert_name: "{{wildcard_cert_name}}"
 
+  - role: httpd/website
+    site_name: "provision{{ env_suffix }}.fedoraproject.org"
+    # Zezere needs non-HTTPS for netboot
+    sslonly: false
+    cert_name: "{{wildcard_cert_name}}"
+    tags:
+    - zezere
+
   - role: httpd/website
     site_name: os.fedoraproject.org
     sslonly: true
@@ -728,7 +736,7 @@
 
   - role: httpd/website
     site_name: lists.fedorahosted.org
-    server_aliases: 
+    server_aliases:
       - lists.stg.fedorahosted.org
     sslonly: true
     certbot: true
@@ -963,10 +971,10 @@
   - role: httpd/website
     site_name: fedorahosted.org
     sslonly: true
-    server_aliases: 
-      - git.fedorahosted.org 
-      - bzr.fedorahosted.org 
-      - hg.fedorahosted.org 
+    server_aliases:
+      - git.fedorahosted.org
+      - bzr.fedorahosted.org
+      - hg.fedorahosted.org
       - svn.fedorahosted.org
     certbot: true
     tags: fedorahosted