diff --git a/playbooks/groups/copr-frontend.yml b/playbooks/groups/copr-frontend.yml
index f669bbc15d..8ee89b721d 100644
--- a/playbooks/groups/copr-frontend.yml
+++ b/playbooks/groups/copr-frontend.yml
@@ -1,34 +1,9 @@
-- name: check/create instance
-  hosts: copr-front-stg:copr-front
-  # hosts: copr-front
-  gather_facts: False
+---
+- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=copr-front-stg"
 
-  vars_files:
-   - /srv/web/infra/ansible/vars/global.yml
-   - "/srv/private/ansible/vars.yml"
-   - /srv/web/infra/ansible/vars/fedora-cloud.yml
-   - /srv/private/ansible/files/openstack/passwords.yml
-
-  tasks:
-  - import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
-
-- name: cloud basic setup
-  hosts: copr-front-stg:copr-front
-  # hosts: copr-front
-  gather_facts: True
-  vars_files:
-   - /srv/web/infra/ansible/vars/global.yml
-   - "/srv/private/ansible/vars.yml"
-
-  tasks:
-  - import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
-  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
-  - name: set hostname (required by some services, at least postfix need it)
-    hostname: name="{{copr_hostbase}}.cloud.fedoraproject.org"
-
-- name: provision instance
-  hosts: copr-front:copr-front-stg
-  # hosts: copr-front
+- name: provision copr frontend
+  hosts: copr-front-stg
+  user: root
   gather_facts: True
 
   vars_files:
@@ -36,7 +11,24 @@
    - "/srv/private/ansible/vars.yml"
    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
 
+  pre_tasks:
+  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
+
   roles:
-   - base
-   - copr/frontend
-   - nagios_client
+  - base
+  - rkhunter
+  - nagios_client
+  - hosts
+  - fas_client
+  - collectd/base
+  - { role: openvpn/client, when: env != "staging" }
+  - redis
+  - mod_wsgi
+  - copr/frontend
+
+  tasks:
+  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
+  - import_tasks: "{{ tasks_path }}/motd.yml"
+
+  handlers:
+  - import_tasks: "{{ handlers_path }}/restart_services.yml"