diff --git a/layers/home.queezle.net.nix b/layers/home.queezle.net.nix
index 4c5ac77873c6c1c06a5cf5e4f1494dfddf6d4837..9e20364537563931c24946866e01f1b009654fe6 100644
--- a/layers/home.queezle.net.nix
+++ b/layers/home.queezle.net.nix
@@ -108,8 +108,8 @@
     email = "jens@nightmarestudio.de";
     certs."home.queezle.net" = {
       dnsProvider = "hetzner";
-      # HACK ask hetzner nameservers directly because acme-lego doesn't follow ns records correctly
-      dnsResolver = "helium.ns.hetzner.de";
+      # HACK acme-lego doesn't follow ns records correctly
+      dnsPropagationCheck = false;
       credentialsFile = "/etc/secrets/dns/dns.hetzner.com_queezle.net";
       group = "nginx";
     };