diff --git a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2 b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
index c2108d8..f359f47 100644
--- a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/mariadb:11
+    image: docker.io/library/mariadb:12
     environment:
       - "MARIADB_DATABASE=wordpress"
       - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"
diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
index 0a6a70d..71ae729 100644
--- a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
+++ b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf
@@ -80,6 +80,8 @@ map $host $upstream_acme_challenge_host {
     staging.cryptoparty.hamburg.ccc.de 172.31.17.151:31820;
     spaceapiccc.hamburg.ccc.de spaceapiccc.hosts.hamburg.ccc.de:31820;
     spaceapi.ccc.de spaceapiccc.hosts.hamburg.ccc.de:31820;
+    cpuccc.hamburg.ccc.de 172.31.17.151:31820;
+    cpu.ccc.de 172.31.17.151:31820;
     default "";
 }
 
diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
index 2ad5dc4..bdf7184 100644
--- a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
+++ b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf
@@ -98,6 +98,8 @@ stream {
         staging.cryptoparty.hamburg.ccc.de 172.31.17.151:8443;
         spaceapiccc.hamburg.ccc.de spaceapiccc.hosts.hamburg.ccc.de:8443;
         spaceapi.ccc.de spaceapiccc.hosts.hamburg.ccc.de:8443;
+        cpuccc.hamburg.ccc.de 172.31.17.151:8443;
+        cpu.ccc.de 172.31.17.151:8443;
     }
 
     server {