diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 7f68eb162a..a02210e880 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -6129,7 +6129,7 @@
   acl-config: /home/gerrit2/acls/vexxhost/vexxhost.config
 - project: vexxhost/base-jobs
   description: Base jobs for VEXXHOST tenant
-  acl-config: /home/gerrit2/acls/vexxhost/vexxhost.config
+  acl-config: /home/gerrit2/acls/opendev/project-config.config
 - project: vexxhost/kue
   description: Tooling for Kubernetes deployment on OpenStack
   acl-config: /home/gerrit2/acls/vexxhost/vexxhost.config
diff --git a/zuul/main.yaml b/zuul/main.yaml
index d2a3bdcfeb..d6ada325f5 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -1522,20 +1522,18 @@
     source:
       gerrit:
         config-projects:
-          - opendev/project-config
           # Only use jobs and secrets from this repo, we do not want
           # the project definition.
-          - opendev/base-jobs:
-              include:
-                - job
-                - secret
-                - nodeset
+          - include: [job, secret, nodeset]
+            projects:
+              - opendev/base-jobs
+              - vexxhost/base-jobs
+              - opendev/project-config
         untrusted-projects:
           - zuul/zuul-jobs
           - vexxhost/ansible-role-docker-distribution
           - vexxhost/ansible-role-openmanage
           - vexxhost/ansible-role-wireguard
-          - vexxhost/base-jobs
           - vexxhost/kue
           - vexxhost/libvirtd_exporter
           - vexxhost/lodgeit-helm