diff --git a/modules/cgit/manifests/init.pp b/modules/cgit/manifests/init.pp
index 06f0e75b65..ef16d8f1c0 100644
--- a/modules/cgit/manifests/init.pp
+++ b/modules/cgit/manifests/init.pp
@@ -34,7 +34,6 @@ class cgit(
       'cgit',
       'git-daemon',
       'highlight',
-      'socat',
     ]:
     ensure => present,
   }
@@ -171,6 +170,7 @@ class cgit(
 
   service { 'git-daemon':
     ensure    => running,
+    enable    => true,
     subscribe => File['/etc/init.d/git-daemon'],
   }
 
diff --git a/modules/openstack_project/manifests/git.pp b/modules/openstack_project/manifests/git.pp
index cf2520b35d..27b4c65caa 100644
--- a/modules/openstack_project/manifests/git.pp
+++ b/modules/openstack_project/manifests/git.pp
@@ -29,6 +29,10 @@ class openstack_project::git (
     mode => 'enforcing'
   }
 
+  package { 'socat':
+    ensure => present,
+  }
+
   class { 'haproxy':
     enable         => true,
     global_options => {
@@ -39,7 +43,7 @@ class openstack_project::git (
       'user'    => 'haproxy',
       'group'   => 'haproxy',
       'daemon'  => '',
-      'stats'   => 'socket /var/lib/haproxy/stats'
+      'stats'   => 'socket /var/lib/haproxy/stats user root group root mode 0600 level admin'
     },
   }
   # The three listen defines here are what the world will hit.