diff --git a/inventory/host_vars/copr-fe.cloud.fedoraproject.org b/inventory/host_vars/copr-fe.cloud.fedoraproject.org
index 7c0c085d32..7ffa52839a 100644
--- a/inventory/host_vars/copr-fe.cloud.fedoraproject.org
+++ b/inventory/host_vars/copr-fe.cloud.fedoraproject.org
@@ -1,4 +1,7 @@
 ---
+# this overrides vars/Fedora.yml
+base_pkgs_erase: 'PackageKit*', 'sendmail', 'at']
+
 instance_type: ms1.medium
 image: "{{ fedora21_x86_64 }}"
 keypair: fedora-admin-20130801
diff --git a/roles/copr/frontend/tasks/main.yml b/roles/copr/frontend/tasks/main.yml
index d4c007049d..4d42673e12 100644
--- a/roles/copr/frontend/tasks/main.yml
+++ b/roles/copr/frontend/tasks/main.yml
@@ -24,6 +24,9 @@
   tags:
   - config
 
+- name: disable firewalld
+  service: name=firewalld enabled=no state=stopped
+
 - name: enable and start redis  # TODO: .service in copr-backend should depend on redis
   service: name=redis enabled=yes state=started