diff --git a/apps/base/cert-manager/clusterissuer_letsencrypt-staging.yaml b/apps/base/cert-manager/clusterissuer_letsencrypt-staging.yaml
index 03e7600..fd016b8 100644
--- a/apps/base/cert-manager/clusterissuer_letsencrypt-staging.yaml
+++ b/apps/base/cert-manager/clusterissuer_letsencrypt-staging.yaml
@@ -11,6 +11,7 @@ spec:
       name: letsencrypt-staging-account-key
     solvers:
       - dns01:
+          cnameStrategy: Follow
           rfc2136:
             nameserver: "198.18.199.53:53"
             tsigKeyName: certmanager
diff --git a/apps/base/cert-manager/clusterissuer_letsencrypt.yaml b/apps/base/cert-manager/clusterissuer_letsencrypt.yaml
index b2950c7..0db344c 100644
--- a/apps/base/cert-manager/clusterissuer_letsencrypt.yaml
+++ b/apps/base/cert-manager/clusterissuer_letsencrypt.yaml
@@ -11,6 +11,7 @@ spec:
       name: letsencrypt-account-key
     solvers:
       - dns01:
+          cnameStrategy: Follow
           rfc2136:
             nameserver: "198.18.199.53:53"
             tsigKeyName: certmanager