diff --git a/inventory/groups.yaml b/inventory/groups.yaml
index a4cdf0e3ca..55c289ab21 100644
--- a/inventory/groups.yaml
+++ b/inventory/groups.yaml
@@ -69,6 +69,7 @@ groups:
     - files[0-9]*.open*.org
     - static.openstack.org
     - gitea[0-9]*.opendev.org
+    - zuul[0-9]*.open*.org
   logstash:
     - logstash[0-9]*.open*.org
   logstash-worker:
diff --git a/manifests/site.pp b/manifests/site.pp
index ff5e3edfe8..e19b96548a 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -929,18 +929,22 @@ node /^zuul\d+\.open.*\.org$/ {
       'zuul.openstack.org' => {
         tenant_name => 'openstack',
         ssl         => true,
+        use_le      => false,
       },
       'zuul.opendev.org' => {
         tenant_name => '',
         ssl         => true,
+        use_le      => false,
       },
       'zuul.openstack.org-http' => {
         tenant_name => 'openstack',
         ssl         => false,
+        use_le      => false,
       },
       'zuul.opendev.org-http' => {
         tenant_name => '',
         ssl         => false,
+        use_le      => false,
       },
     },
     vhosts_ssl => {
diff --git a/playbooks/host_vars/zuul01.openstack.org b/playbooks/host_vars/zuul01.openstack.org
new file mode 100644
index 0000000000..871cceaeca
--- /dev/null
+++ b/playbooks/host_vars/zuul01.openstack.org
@@ -0,0 +1,4 @@
+letsencrypt_certs:
+  zuul01-opendev-main:
+    - zuul.opendev.org
+    - zuul01.opendev.org
diff --git a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
index 3fa3cb5d46..96729d478c 100644
--- a/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
+++ b/playbooks/roles/letsencrypt-create-certs/handlers/main.yaml
@@ -25,6 +25,9 @@
 - name: letsencrypt updated zuul-ci-git
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
 
+- name: letsencrypt updated zuul01-opendev-main
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 - name: letsencrypt updated logs-main
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml