diff --git a/docker-compose.yml b/docker-compose.yml
index 56fe666..91a8036 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -64,6 +64,11 @@ services:
     ports:
       - "80:80"
       - "443:443"
+    # Host uses systemd-resolved (127.0.0.53), unreachable from inside the
+    # container network namespace; ACME lookups need a real resolver.
+    dns:
+      - 1.1.1.1
+      - 8.8.8.8
     environment:
       PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}
       CMS_DOMAIN: ${CMS_DOMAIN}