diff --git a/roles/basset/frontend/tasks/main.yml b/roles/basset/frontend/tasks/main.yml
index 54637ab228..d2ccf6b303 100644
--- a/roles/basset/frontend/tasks/main.yml
+++ b/roles/basset/frontend/tasks/main.yml
@@ -6,6 +6,15 @@
   - basset
   - basset/frontend
 
+- name: install basset config
+  template: src=frontend.cfg.j2 dest=/etc/basset/frontend.cfg
+            user=basset-frontend group=basset-frontend mode=0600
+  notify:
+  - restart httpd
+  tags:
+  - basset
+  - basset/frontend
+
 - name: install staging htpasswd
   copy: src={{private}}/files/httpd/basset.stg.htpasswd dest=/etc/httpd/conf.d/basset.htpasswd
         owner=root group=root mode=0644
diff --git a/roles/basset/frontend/templates/frontend.cfg.j2 b/roles/basset/frontend/templates/frontend.cfg.j2
new file mode 100644
index 0000000000..476efa2737
--- /dev/null
+++ b/roles/basset/frontend/templates/frontend.cfg.j2
@@ -0,0 +1,6 @@
+[submission_access]
+10.5.126.63 = mediawiki.new,mediawiki.edit
+10.5.126.73 = mediawiki.new,mediawiki.edit
+10.5.126.25 = fedora.fas.registration,fedora.fas.cla_sign
+10.5.126.26 = fedora.fas.registration,fedora.fas.cla_sign
+10.5.126.30 = fedora.fas.registration,fedora.fas.cla_sign