diff --git a/config/deploy.rb b/config/deploy.rb
index d532a9891dc..618f5fa9ed6 100644
--- a/config/deploy.rb
+++ b/config/deploy.rb
@@ -67,8 +67,16 @@
     end
   end
 
+  desc 'Modify permissions on /srv/idp'
+  task :mod_perms do
+    on roles(:web), in: :parallel do
+      execute :sudo, :chown, '-R', 'ubuntu:nogroup', deploy_to
+    end
+  end
+
   before 'assets:precompile', :browserify
   after 'deploy:updated', 'newrelic:notice_deployment'
   after 'deploy:log_revision', :deploy_json
+  after 'deploy', 'deploy:mod_perms'
 end
 # rubocop:enable Metrics/BlockLength
diff --git a/config/deploy/int.rb b/config/deploy/int.rb
new file mode 100644
index 00000000000..267dce5a32c
--- /dev/null
+++ b/config/deploy/int.rb
@@ -0,0 +1,2 @@
+server 'int.login.gov', roles: %w(web db)
+server 'worker.int.login.gov', roles: %w(app job_creator)