diff --git a/udm-le.env b/udm-le.env
index 967449f..c46dcf3 100644
--- a/udm-le.env
+++ b/udm-le.env
@@ -23,12 +23,10 @@ NO_BUNDLE="no"
 # Enable updating Radius support
 ENABLE_RADIUS="no"
 
-# Allows CNAMEs to be resolved. When true, allows resolving _acme-challenge.* in case it
-# has a CNAME pointing to a different domain. With this, make sure the DNS provider config
-# is for the provider the CNAME points to.
-#
-# Leave this disabled if you don't know what this means as most configurations don't need it.
-LEGO_EXPERIMENTAL_CNAME_SUPPORT=false
+# Disable support for CNAME resolution. When false, allows resolving _acme-challenge.* if you
+# have a CNAME pointing to a different domain. This is generally not something people need, so leave
+# this alone unless you've explicitly set up a CNAME and understand the implications.
+LEGO_DISABLE_CNAME_SUPPORT=true
 
 # The DNS resolver used to verify records. Change this to a public DNS resolver if you have
 # modified your UDM's upstream DNS servers to point to an internal resolver that is the