diff --git a/base/cert-manager/cluster-issuer-letsencrypt-prod.yaml b/base/cert-manager/cluster-issuer-letsencrypt-prod.yaml
index 0c2f2a4..18a3e9b 100644
--- a/base/cert-manager/cluster-issuer-letsencrypt-prod.yaml
+++ b/base/cert-manager/cluster-issuer-letsencrypt-prod.yaml
@@ -13,6 +13,7 @@ spec:
     - http01:
         ingress: {}
     - dns01:
+        cnameStrategy: follow
         cloudflare:
           email: support@freifunk-duesseldorf.de
           apiTokenSecretRef:
@@ -21,3 +22,4 @@ spec:
       selector:
         dnsZones:
         - ffddorf.net
+        - freifunk-duesseldorf.de