diff --git a/nodepool/nodepool.yaml b/nodepool/nodepool.yaml
index 1c1eae2b5f..648bcd244b 100644
--- a/nodepool/nodepool.yaml
+++ b/nodepool/nodepool.yaml
@@ -169,6 +169,8 @@ diskimages:
       DIB_APT_LOCAL_CACHE: '0'
       DIB_DISABLE_APT_CLEANUP: '1'
       DIB_DISTRIBUTION_MIRROR: 'http://mirror.dfw.rax.openstack.org/debian'
+      DIB_DEBIAN_SECURITY_MIRROR:
+        'http://mirror.dfw.rax.openstack.org/debian-security'
       DIB_DEBOOTSTRAP_EXTRA_ARGS: '--no-check-gpg'
       DIB_GRUB_TIMEOUT: '0'
       GIT_HTTP_LOW_SPEED_TIME: '300'
@@ -193,6 +195,8 @@ diskimages:
       DIB_APT_LOCAL_CACHE: '0'
       DIB_DISABLE_APT_CLEANUP: '1'
       DIB_DISTRIBUTION_MIRROR: 'http://mirror.dfw.rax.openstack.org/debian'
+      DIB_DEBIAN_SECURITY_MIRROR:
+        'http://mirror.dfw.rax.openstack.org/debian-security'
       DIB_DEBOOTSTRAP_EXTRA_ARGS: '--no-check-gpg'
       DIB_GRUB_TIMEOUT: '0'
       GIT_HTTP_LOW_SPEED_TIME: '300'