diff --git a/letsencrypt/acme.nix b/letsencrypt/acme.nix
index bbafccc..077652d 100644
--- a/letsencrypt/acme.nix
+++ b/letsencrypt/acme.nix
@@ -26,7 +26,7 @@ in
         ! (lib.elem cfg.dns.provider dnsPropagationCheckExceptions);
       reloadServices = [ "nginx" ];
     };
-    certs = lib.mkForce {
+    certs = {
       "wildcard-${cfg.domain}" = {
         domain = "*.${cfg.domain}";
         extraDomainNames = [ "${cfg.domain}" ];