diff --git a/puppet/data/common.yaml b/puppet/data/common.yaml
index 333e78927..85da91a96 100644
--- a/puppet/data/common.yaml
+++ b/puppet/data/common.yaml
@@ -1,4 +1,7 @@
 ---
+stable_release: '3.11'
+profiles::web::stable: '%{alias("stable_release")}'
+
 backup_servicename: 'backups.theforeman.org'
 backup_username: 'backup-%{facts.networking.hostname}'
 foreman_servicename: 'foreman.theforeman.org'
diff --git a/puppet/modules/profiles/manifests/web.pp b/puppet/modules/profiles/manifests/web.pp
index 05715f8ec..68f5dfd4a 100644
--- a/puppet/modules/profiles/manifests/web.pp
+++ b/puppet/modules/profiles/manifests/web.pp
@@ -11,7 +11,7 @@
 #   in a 2 pass setup. First Apache needs to run for Letsencrypt to function.
 #   Then Letsencrypt can be enabled. Also useful to turn off in test setups.
 class profiles::web (
-  String[1] $stable = '3.11',
+  String[1] $stable,
   Hash[String, Hash] $debugs_htpasswds = {},
   Boolean $https = true,
 ) {