diff --git a/roles/notifs-frontend/tasks/main.yml b/roles/notifs-frontend/tasks/main.yml
index db83c9ef43..0ab1dc1088 100644
--- a/roles/notifs-frontend/tasks/main.yml
+++ b/roles/notifs-frontend/tasks/main.yml
@@ -40,3 +40,6 @@
     setype=httpd_sys_content_t
     state=directory
     recurse=yes
+
+- name: ensure selinux lets httpd talk to postgres
+  seboolean: name=httpd_can_network_connect_db state=yes persistent=yes