diff --git a/apps/mcpacks/ingress.yaml b/apps/mcpacks/ingress.yaml
index 69a9050..3a33f0e 100644
--- a/apps/mcpacks/ingress.yaml
+++ b/apps/mcpacks/ingress.yaml
@@ -9,7 +9,7 @@ metadata:
     # Prove DNS-01 issuance with Let's Encrypt's untrusted staging service
     # first. Change this to letsencrypt-prod only after the staging Certificate
     # is Ready; production has strict rate limits for repeated mistakes.
-    cert-manager.io/cluster-issuer: letsencrypt-staging
+    cert-manager.io/cluster-issuer: letsencrypt
 spec:
   tls:
     - hosts: