No need for notifs backend to be on the vpn.

playbooks/groups/notifs-backend.yml

@@ -45,8 +45,10 @@
   - include: "{{ tasks }}/2fa_client.yml"
   - include: "{{ tasks }}/motd.yml"
   - include: "{{ tasks }}/sudo.yml"
-  - include: "{{ tasks }}/openvpn_client.yml"
-    when: env != "staging"
+  # The proxies don't actually need to talk to these hosts so we won't bother
+  # putting them on the vpn.
+  #- include: "{{ tasks }}/openvpn_client.yml"
+  #  when: env != "staging"
 
   handlers:
   - include: "{{ handlers }}/restart_services.yml"