diff --git a/roles/pagure/tasks/main.yml b/roles/pagure/tasks/main.yml
index eaa1d4fdc7..fbf657705a 100644
--- a/roles/pagure/tasks/main.yml
+++ b/roles/pagure/tasks/main.yml
@@ -351,7 +351,7 @@
 - name: Install client_secrets for ipsilon
   template: src=client_secrets.json
             dest=/etc/pagure
-            owner=root group=root mode=0600
+            owner=git group=postfix mode=0640
   tags:
   - config
   - web
diff --git a/roles/pagure/templates/pagure.cfg b/roles/pagure/templates/pagure.cfg
index b3f8a39efe..f250c9ef06 100644
--- a/roles/pagure/templates/pagure.cfg
+++ b/roles/pagure/templates/pagure.cfg
@@ -196,7 +196,7 @@ DISABLED_PLUGINS = ['IRC']
 # Specify which authentication method to use, defaults to `fas` can be or
 # `local`
 # Default: ``fas``.
-{% if env == 'staging' %}
+{% if env == 'pagure-staging' %}
 PAGURE_AUTH = 'oidc'
 OIDC_CLIENT_SECRETS = "/etc/pagure/client_secrets.json"
 {% else %}