diff --git a/services/traefik/docker-compose.yml.j2 b/services/traefik/docker-compose.yml.j2
index 0f8d3c14..c1d77b56 100644
--- a/services/traefik/docker-compose.yml.j2
+++ b/services/traefik/docker-compose.yml.j2
@@ -122,10 +122,8 @@ services:
         - prometheus-job=traefik_ops
         - prometheus-port=8082
         # wildcard certificate
-        - traefik.http.routers.api.tls.domains[0].main=service.${MACHINE_FQDN}
-        - traefik.http.routers.api.tls.domains[0].sans=*.services.${MACHINE_FQDN}
-        - traefik.http.routers.api.tls.domains[0].main=service.testing.${MACHINE_FQDN}
-        - traefik.http.routers.api.tls.domains[0].sans=*.services.testing.${MACHINE_FQDN}
+        - traefik.http.routers.api.tls.domains[0].main=${MACHINE_FQDN}
+        - traefik.http.routers.api.tls.domains[0].sans=*.${MACHINE_FQDN}
         # ops generic rate limiter
         - traefik.http.middlewares.ops_ratelimit.ratelimit.average=${TRAEFIK_RATELIMIT_AVG}
         - traefik.http.middlewares.ops_ratelimit.ratelimit.burst=${TRAEFIK_RATELIMIT_BURST}