diff --git a/basics.yml b/basics.yml
index b0d673b..b3d9ac9 100644
--- a/basics.yml
+++ b/basics.yml
@@ -5,6 +5,11 @@
     - ffhh-basics
   tags: basics
 
+- hosts: certsync
+  roles:
+    - certsync
+  tags: certsync
+
 - hosts: letsrenew
   roles:
     - letsrenew
diff --git a/production b/production
index 55f3057..2537bd3 100644
--- a/production
+++ b/production
@@ -3,13 +3,13 @@ srv01 ansible_host=srv01.hamburg.freifunk.net
 srv03 ansible_host=srv03.hamburg.freifunk.net
 srv04 ansible_host=srv04.hamburg.freifunk.net
 
+[certsync]
+srv03
+
 [letsrenew]
 srv01
 srv04
 
-[services]
-srv03
-srv04
-
 [updates]
+srv01
 srv03
diff --git a/services.yml b/services.yml
index 3047ff2..4308816 100644
--- a/services.yml
+++ b/services.yml
@@ -5,5 +5,5 @@
 
 - hosts: updates
   roles:
-    - certsync
     - website/updates
+  tags: updates