diff --git a/smoothschedule/compose/production/traefik/traefik.yml b/smoothschedule/compose/production/traefik/traefik.yml
index dc8b413..1016ed9 100644
--- a/smoothschedule/compose/production/traefik/traefik.yml
+++ b/smoothschedule/compose/production/traefik/traefik.yml
@@ -34,7 +34,7 @@ certificatesResolvers:
       email: 'admin@smoothschedule.com'
       storage: /etc/traefik/acme/acme.json
       dnsChallenge:
-        provider: digitalocean
+        provider: cloudflare
         resolvers:
           - "1.1.1.1:53"
           - "8.8.8.8:53"
diff --git a/smoothschedule/docker-compose.production.yml b/smoothschedule/docker-compose.production.yml
index 05498e1..a3f041b 100644
--- a/smoothschedule/docker-compose.production.yml
+++ b/smoothschedule/docker-compose.production.yml
@@ -41,8 +41,10 @@ services:
     volumes:
       - production_traefik:/etc/traefik/acme
     environment:
-      # DigitalOcean API token for DNS challenge (wildcard certs)
-      - DO_AUTH_TOKEN=${DO_AUTH_TOKEN}
+      # Cloudflare API token for DNS challenge (wildcard certs)
+      # Create at: https://dash.cloudflare.com/profile/api-tokens
+      # Permissions needed: Zone:DNS:Edit for smoothschedule.com
+      - CF_DNS_API_TOKEN=${CF_DNS_API_TOKEN}
     ports:
       - '0.0.0.0:80:80'
       - '0.0.0.0:443:443'