diff --git a/hosts/ds9/default.nix b/hosts/ds9/default.nix
index 5d0b591b..98bd08f4 100644
--- a/hosts/ds9/default.nix
+++ b/hosts/ds9/default.nix
@@ -212,6 +212,7 @@ in
       }
     '';
     globalConfig = ''
+      acme_ca https://acme-v02.api.letsencrypt.org/directory # hard coded so zerossl doesn't get used
       acme_dns desec {
         token "{$TOKEN}"
       }
diff --git a/hosts/picard/default.nix b/hosts/picard/default.nix
index a724a0eb..d2a4fce5 100644
--- a/hosts/picard/default.nix
+++ b/hosts/picard/default.nix
@@ -99,6 +99,7 @@
     enable = true;
     globalConfig = ''
       email ssl@xyno.systems
+      acme_ca https://acme-v02.api.letsencrypt.org/directory # hard coded so zerossl doesn't get used
       acme_dns desec {
         token "{$TOKEN}"
       }