diff --git a/host_vars/mail01.l3d.space/vars.yml b/host_vars/mail01.l3d.space/vars.yml
index f35d6a7..4189e07 100644
--- a/host_vars/mail01.l3d.space/vars.yml
+++ b/host_vars/mail01.l3d.space/vars.yml
@@ -53,6 +53,16 @@ nginx_sites:
 # letsencrypt
 acme_notification_email: "{{ _acme_notification_email }}"
 
+# acmetool config
+acme_reload_services:
+  - 'nginx'
+
+acme_restart_services:
+  - 'rspamd'
+  - 'dovecot'
+  - 'unbound'
+  - 'redis-server'
+
 # firewall
 fail2ban_destemail: "{{ _fail2ban_destemail }}"
 firewall_allowed_tcp_ports:
diff --git a/host_vars/services.l3d.space/vars.yml b/host_vars/services.l3d.space/vars.yml
index d9c903b..87f9ff4 100644
--- a/host_vars/services.l3d.space/vars.yml
+++ b/host_vars/services.l3d.space/vars.yml
@@ -19,3 +19,8 @@ etebase__allowed_hosts_allowed_host1: 'etebase.l3d.ch'
 etebase__restart_webserver: true
 etebase__systemd_setup: true
 etebase__create_backup: true
+
+# acmetool config
+acme_reload_services:
+  - 'nginx'
+
diff --git a/host_vars/web01.l3d.space/vars.yml b/host_vars/web01.l3d.space/vars.yml
index a346543..8faa291 100644
--- a/host_vars/web01.l3d.space/vars.yml
+++ b/host_vars/web01.l3d.space/vars.yml
@@ -107,6 +107,13 @@ local_accounts:
   - 'klima'
   - 'roles'
 
+# acmetool config
+acme_reload_services:
+  - 'nginx'
+
+acme_restart_services:
+  - 'gitea'
+
 acme_domain_unwant_list: []
 #  - name: 'example.com'
 
diff --git a/roles/do1jlr.acmetool b/roles/do1jlr.acmetool
index 83df9b7..18a56d9 160000
--- a/roles/do1jlr.acmetool
+++ b/roles/do1jlr.acmetool
@@ -1 +1 @@
-Subproject commit 83df9b74904169e5698555cac183e5cb410f86a6
+Subproject commit 18a56d9045a78634f9fcaf0d8cd5aa0ab2f1393e
diff --git a/roles/do1jlr.etebase b/roles/do1jlr.etebase
index 1c12366..16f389c 160000
--- a/roles/do1jlr.etebase
+++ b/roles/do1jlr.etebase
@@ -1 +1 @@
-Subproject commit 1c12366f23b6f8f516eba2605b91fa7c1dd1cfc4
+Subproject commit 16f389ca76868c0208191595aa036a19cc49c867
diff --git a/roles/do1jlr.rspamd b/roles/do1jlr.rspamd
index 8dcfbcb..affa49e 160000
--- a/roles/do1jlr.rspamd
+++ b/roles/do1jlr.rspamd
@@ -1 +1 @@
-Subproject commit 8dcfbcbeead8675161aff34804603b2cd9a548ec
+Subproject commit affa49e57040ff0852a85ab3d4ee0da6c6669f2d
diff --git a/roles/do1jlr.weechat b/roles/do1jlr.weechat
index 759f0be..f31546b 160000
--- a/roles/do1jlr.weechat
+++ b/roles/do1jlr.weechat
@@ -1 +1 @@
-Subproject commit 759f0be0edc8fc7cd6416b8f47755e2b13f5d47f
+Subproject commit f31546bbda440578f289aa27469fd5bf778a96fb