diff --git a/templates/haproxy.cfg.tmpl b/templates/haproxy.cfg.tmpl
index 9726bd88328a1612dad5c6d0ed94bd08311fb359..965fdf44dc6a7485849434f81d5d875c833f2bf9 100644
--- a/templates/haproxy.cfg.tmpl
+++ b/templates/haproxy.cfg.tmpl
@@ -35,7 +35,8 @@ mode http
   rspidel Server
   rspidel X-Powered-By
 
-  use_backend letsencrypt-web if { path_beg /.well-known/acme }
+  acl acme path_beg /.well-known/acme
+  use_backend letsencrypt-web if acme
 {{ range $host, $containers := groupBy $ "Env.LIBRESH_WEBHOOK_HOST" }}
   use_backend webhook if { path_beg /XxosJDdRpo7Rww87VkJGzv1QLegnhh-uniq-libresh }
 {{end}}