diff --git a/.woodpecker.yml b/.woodpecker.yml
index ae90560..07576f9 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -83,7 +83,9 @@ steps:
         # --- Certificat TLS (acme.sh via sonic-acme-1) ---
         # acme.sh est idempotent : skip si cert valide, renouvelle si proche expiration
         # Exit 0 = emis/renouvele, exit 2 = skip (domaine inchange), autres = erreur
+        # --home /etc/acme.sh = volume persistant sonic_acme (sinon /root/.acme.sh non persiste)
         docker exec sonic-acme-1 /app/acme.sh \
+          --home /etc/acme.sh \
           --issue -d "$DOMAIN" \
           --webroot /usr/share/nginx/html \
           --server letsencrypt \