diff --git a/worker-pools.yml b/worker-pools.yml
index a7365fa3..39a10fa1 100644
--- a/worker-pools.yml
+++ b/worker-pools.yml
@@ -2413,6 +2413,7 @@ pools:
         level: 3
       - pool-group: gecko-1
         suffix: alpha
+      - pool-group: mozillavpn-1
     provider_id:
       by-level:
         1: azure2
@@ -2420,14 +2421,20 @@ pools:
     config:
       image: 'ronin_b{level}_windows11_a64_24h2_builder_{suffix}'
       implementation: generic-worker/worker-runner-windows
-      worker-purpose: '{pool-group}'
+      worker-purpose:
+        by-pool-group:
+          mozillavpn-1: vpn-1
+          default: null  # defaults to pool-group
       locations: [east-us-2, west-us-3, north-central-us, central-us]
-      maxCapacity: 250
+      maxCapacity:
+        by-pool-group:
+          gecko.*: 250
+          mozillavpn.*: 10
       worker-config:
         genericWorker:
           config:
-            workerType: win11-a64-24h2-builder-alpha
-            provisionerId: gecko-1
+            workerType: win11-a64-24h2-builder-{suffix}
+            provisionerId: '{pool-group}'
             cachesDir: C:\caches
             downloadsDir: C:\downloads
             tasksDir: C:\