diff --git a/ops/nixos/lib/vault-agent-acme.nix b/ops/nixos/lib/vault-agent-acme.nix
index feb048667d..746b9fe74c 100644
--- a/ops/nixos/lib/vault-agent-acme.nix
+++ b/ops/nixos/lib/vault-agent-acme.nix
@@ -170,7 +170,8 @@ in
 
   config = {
     my.vault.settings = {
-      template = mkBefore acmeCertificatesTemplate;
+      # TODO: lukegb: figure out how to not get this to DoS Let's Encrypt.
+      #template = mkBefore acmeCertificatesTemplate;
     };
 
     systemd = optionalAttrs config.my.vault.enable {