diff --git a/config-templates/traefik/traefik.yml b/config-templates/traefik/traefik.yml
index 8f69331..98f5f1e 100644
--- a/config-templates/traefik/traefik.yml
+++ b/config-templates/traefik/traefik.yml
@@ -28,6 +28,7 @@ certificatesResolvers:
   letsencrypt:
     acme:
       email: ACME_EMAIL_PLACEHOLDER  # Will be replaced by deploy script
+      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
       storage: /acme.json
       # For testing: Use staging to avoid production rate limits
       # caServer: https://acme-staging-v02.api.letsencrypt.org/directory
diff --git a/docker-compose/core/traefik/traefik.yml b/docker-compose/core/traefik/traefik.yml
index bbcba25..4f2d6bb 100644
--- a/docker-compose/core/traefik/traefik.yml
+++ b/docker-compose/core/traefik/traefik.yml
@@ -27,15 +27,13 @@ entryPoints:
 certificatesResolvers:
   letsencrypt:
     acme:
-      email: kelinfoxy@gmail.com
+      email: kelinfoxy@gmail.com  # Will be replaced by deploy script
+      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
       storage: /acme.json
-      # Use DNS challenge for wildcard certificate support
+      # DNS challenge - For wildcard certificates (*.yourdomain.duckdns.org)
+      # Works with DuckDNS - requires DUCKDNS_TOKEN in environment
       dnsChallenge:
         provider: duckdns
-        delayBeforeCheck: 300  # Wait 5 minutes before checking DNS propagation
-        resolvers:
-          - "1.1.1.1:53"
-          - "8.8.8.8:53"
 
 providers:
   docker: