diff --git a/hiera/common.yaml b/hiera/common.yaml
index 6018e0e517..220faec1f8 100644
--- a/hiera/common.yaml
+++ b/hiera/common.yaml
@@ -233,6 +233,7 @@ cacti_hosts:
 - afsdb02.openstack.org
 - apps.openstack.org
 - ask.openstack.org
+- backup01.ord.rax.ci.openstack.org
 - baremetal00.vanilla.ic.openstack.org
 - cacti.openstack.org
 - ci-backup-rs-ord.openstack.org
diff --git a/manifests/site.pp b/manifests/site.pp
index 7b75cee135..d4e324603b 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1567,6 +1567,18 @@ node /^ci-backup-.*\.openstack\.org$/ {
   include openstack_project::backup_server
 }
 
+# Node-OS: xenial
+# A backup machine (new).  Don't run cron or puppet agent on it.
+node /^backup\d+\..*\.ci\.openstack\.org$/ {
+  $group = "ci-backup"
+  class { 'openstack_project::server':
+    iptables_public_tcp_ports => [],
+    manage_exim => false,
+    purge_apt_sources => false,
+  }
+  include openstack_project::backup_server
+}
+
 # Node-OS: trusty
 node 'proposal.slave.openstack.org' {
   include openstack_project