diff --git a/puppet/zulip_ops/manifests/app_frontend.pp b/puppet/zulip_ops/manifests/app_frontend.pp
index dc3e4699a8..42b250b4de 100644
--- a/puppet/zulip_ops/manifests/app_frontend.pp
+++ b/puppet/zulip_ops/manifests/app_frontend.pp
@@ -11,6 +11,10 @@ class zulip_ops::app_frontend {
   zulip_ops::firewall_allow{ 'http': }
   zulip_ops::firewall_allow{ 'https': }
 
+  group { 'redistunnel':
+    ensure => present,
+    gid    => '1080',
+  }
   user { 'redistunnel':
     ensure     => present,
     uid        => '1080',
diff --git a/puppet/zulip_ops/manifests/profile/redis.pp b/puppet/zulip_ops/manifests/profile/redis.pp
index e9e980bfb1..6b80a86384 100644
--- a/puppet/zulip_ops/manifests/profile/redis.pp
+++ b/puppet/zulip_ops/manifests/profile/redis.pp
@@ -16,6 +16,10 @@ class zulip_ops::profile::redis inherits zulip_ops::profile::base {
     content => "${zulip::profile::redis::redis_password}\n",
   }
 
+  group { 'redistunnel':
+    ensure => present,
+    gid    => '1080',
+  }
   user { 'redistunnel':
     ensure     => present,
     uid        => '1080',