diff --git a/tasks/common.yml b/tasks/common.yml
index b4a5e07..b20e449 100644
--- a/tasks/common.yml
+++ b/tasks/common.yml
@@ -1,7 +1,18 @@
 ---
 ## Selinux
 - name: Disable SELinux
   selinux: policy=targeted state=permissive
 
 - name: Permanently disable SELinux
   copy: src=selinux-config dest=/etc/selinux/config
+
+# EPEL
+- name: Install EPEL repo.
+  yum:
+    name: "https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm"
+    state: present
+
+- name: Import EPEL GPG key.
+  rpm_key:
+    key: "/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7"
+    state: present
diff --git a/tasks/configure-dbs.yml b/tasks/configure-dbs.yml
index fec4e04..0b24f90 100644
--- a/tasks/configure-dbs.yml
+++ b/tasks/configure-dbs.yml
@@ -1,33 +1,32 @@
 ---
 - yum:
     name=http://repo.mysql.com/mysql-community-release-el7-5.noarch.rpm
     state=present
 
 - yum: 
     name="{{ item }}"
     state=latest 
     update_cache=yes
   with_items:
     - vim
     - git
     - ntp
     - mysql-community-server
     - MySQL-python
+
+- name: Copy mysql config
+  template: src=my.cnf dest=/etc/my.cnf
+  notify: restart mysql
+
+- name: Copy phabricator stop words
+  copy: src=stopwords.txt dest=/srv/stopwords.txt
   notify: restart mysql
 
 - name: Create database user
   mysql_user:
       state=present
       user={{ mysql_user }}
       password={{ mysql_pass}}
       priv=*.*:ALL
       host={{ groups['app'][0] }}
 
-- name: Copy mysql config
-  template: src=my.cnf dest=/etc/my.cnf
-  notify: restart mysql
-
-- name: Copy phabricator stop words
-  copy: src=stopwords.txt dest=/srv/stopwords.txt
-  notify: restart mysql
-
diff --git a/templates/local.json b/templates/local.json
index 47a2427..45316ee 100644
--- a/templates/local.json
+++ b/templates/local.json
@@ -1,8 +1,11 @@
 {
   "mysql.pass": "{{ mysql_pass }}",
   "mysql.user": "{{ mysql_user }}",
   "mysql.host": "{{ groups['dbs'][0]  }}",
   "phabricator.base-uri": "http://{{ domain }}",
-  "storage.local-disk.path": "/srv/files"
+  "amazon-s3.access-key": "{{ s3_access_key }}",
+  "amazon-s3.secret-key": "{{ s3_secret_key }}",
+  "storage.s3.bucket": "{{ s3_bucket }}",
+  "auth.require-approval": false
 }