diff --git a/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp b/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
index 34f7396..1fb6c94 100644
--- a/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
+++ b/global/overlay/etc/puppet/modules/cdn/manifests/ca.pp
@@ -116,7 +116,4 @@ class cdn::ca(
     creates => '/root/.step/config/defaults.json',
     onlyif  => 'test -f /opt/step-ca/data/certs/root_ca.crt'
   }
-
-  # Enable acme
-  # step ca provisioner add acme --type ACME --admin-subject=step --admin-password-file=/opt/step-ca/init/secrets/provisioner-password
 }
diff --git a/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb b/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
index 4cd8622..75245d5 100644
--- a/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
+++ b/global/overlay/etc/puppet/modules/cdn/templates/ca/docker-compose.yml.erb
@@ -11,3 +11,4 @@ services:
       - DOCKER_STEPCA_INIT_DNS_NAMES=localhost,<%= @networking['fqdn'] %>
       - DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT=true
       - DOCKER_STEPCA_INIT_PASSWORD_FILE=/init-secrets/key-password
+      - DOCKER_STEPCA_INIT_ACME=true