diff --git a/config/unbound/APKBUILD b/config/unbound/APKBUILD
index 0a79cc7..a2ce040 100644
--- a/config/unbound/APKBUILD
+++ b/config/unbound/APKBUILD
@@ -6,8 +6,8 @@ _svcname=unbound
 
 _dkim_date=2021.03.28
 _dnssec_date=2021.04.05
-pkgver=2021.04.20
-pkgrel=0
+pkgver=2021.04.29
+pkgrel=2
 depends="alpine-baselayout ca-certificates-bundle dns-root-hints dnssec-root"
 makedepends="redxen-secret-opendkim-dns~$_dkim_date bind-dnssec-tools redxen-secret-dnssec~$_dnssec_date"
 checkdepends="bind-tools unbound"
@@ -98,5 +98,5 @@ d94ad338e2ea43c3ecdc62c861eddc0bb706807b738dd985309bcdf0b5fb435d7260bf272e2bbe40
 1eb7833b06f158f13b7c52ee14cd4e455acd9a8de344d6410092a5de98b1f4a62e209ce1e744cfc1a8afd588d3f54c5ce35a59ca31e3dd0fc16d517975fc6aa1  internal.conf
 28c917fe7f69643887097553312c4f1ffc747dffdbf150430e6c4b2e5833567922810716cb59a27887915664777ac3263be3c826956f504499f0ebdcc0b3aac5  auth-redxen.conf
 91847e65c48e585f298bb766b2b20c43f5380686b594233da3b722962b03f2f4c858bf299b745027dadd184408a87b1e85ebf03b027196756455afea69f79cf9  auth-crxn.conf
-9acdf83c65c808b8bcd101cc44efb755305afcd38d88f7b51dc53a1455f1a25d451074a035dab2e3bf72a3c6618ef8d17ced7e4e5b25ac061fdc2e9347d6a0f5  redxen.eu
+44ffaafac7f0255218aaa1d32e496df3cfa051972b2817aaabe4db802aa1e209f6022546126f93d2b349d431e82380568cfb1f48f2610b9aae4cd047fa26e8d0  redxen.eu
 7a487f4f350310c2f1d3f7bf422352264b8ebe3dec1b5892685c59912aed8542711e253638d30f87e2b9b97144a12222de10ebe23ce6bb54a958ec7e5b35743d  crxn"
diff --git a/config/unbound/zones/redxen.eu b/config/unbound/zones/redxen.eu
index fa82aa9..73b66d3 100644
--- a/config/unbound/zones/redxen.eu
+++ b/config/unbound/zones/redxen.eu
@@ -90,4 +90,8 @@ _DMARC                                  10800   IN      TXT     "v=DMARC1; p=qua
 _mumble._tcp                            10800   IN      SRV     0 5 64738 8101153.nbg1-dc3.hetzner
 _mumble._tcp                            10800   IN      SRV     0 5 64738 8201371.fsn1-dc14.hetzner
 
+; ACME
+_acme-challenge                         300     IN      TXT     "---"
+_acme-challenge                         300     IN      TXT     "---"
+
 ; Build-time records and custom ones
diff --git a/secret/letsencrypt/APKBUILD b/secret/letsencrypt/APKBUILD
index f5367af..df4ad6b 100644
--- a/secret/letsencrypt/APKBUILD
+++ b/secret/letsencrypt/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: Alex Denes <caskd@redxen.eu>
 # Maintainer: Alex Denes <caskd@redxen.eu>
 pkgname=redxen-secret-letsencrypt
-pkgver=2021.02.05
-pkgrel=1
+pkgver=2021.04.29
+pkgrel=0
 pkgdesc="LetsEncrypt keys"
 url="https://git.redxen.eu/RedXen"
 arch="noarch"
@@ -58,5 +58,5 @@ ca() {
 }
 
 sha512sums="11d85953a19bbc4ccea99370d0c7bc1fea78398173602b2b0b4b393704887d9686705456c2b1c8857242c1ced6efe0dd3aca1b202ba5d72549185bd4d1a5feaf  private.key
-84c69314788d2972d7b064c3fe666474b777333d660327f34404c598e5849989e659137adfec9d1e65eaa1c3fe9a161dbefd1e4c40e40ef9855dd142ba576ca2  public.pem
+d3bb011441ba98d76943b4735ac948fdea520fb11ba7d3911509a0e56f0ecb194cacfb91e7f27a5f5f5a2df4aa48c9a4b05e8d661657c176f02e70fa780e12ed  public.pem
 aca83fbc7ecf8c225c1145aec21cf70fb1ecd5b37c983e81e313436f0d7f4d1dcb7b89edd2293cb4a648f13b3042438be28d712145f7cc5896c0ff6e0ffc8db9  ca.pem"