diff --git a/lxc1/p1-ingress/traefik.yml b/lxc1/p1-ingress/traefik.yml
index 7f2d4ff..8924152 100644
--- a/lxc1/p1-ingress/traefik.yml
+++ b/lxc1/p1-ingress/traefik.yml
@@ -39,6 +39,14 @@ services:
       - "--certificatesresolvers.desec.acme.dnschallenge.provider=desec"
       - "--certificatesresolvers.desec.acme.email=${ACME_EMAIL}"
       - "--certificatesresolvers.desec.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesresolvers.mysresolver.acme.dnschallenge=true"
+      - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=desec"
+      - "--certificatesresolvers.myresolver.acme.email=${ACME_EMAIL}"
+      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
+      - "--certificatesresolvers.dns_resolver.acme.dnschallenge=true"
+      - "--certificatesresolvers.dns_resolver.acme.dnschallenge.provider=desec"
+      - "--certificatesresolvers.dns_resolver.acme.email=${ACME_EMAIL}"
+      - "--certificatesresolvers.dns_resolver.acme.storage=/letsencrypt/acme.json"
       # Optimization: deSEC is fast; we don't need massive delays or propagation checks
       - "--certificatesresolvers.desec.acme.dnschallenge.delaybeforecheck=10"
       - "--certificatesresolvers.desec.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53"