diff --git a/zuul.d/system-config-run.yaml b/zuul.d/system-config-run.yaml
index 6dd62932b6..ed180616cf 100644
--- a/zuul.d/system-config-run.yaml
+++ b/zuul.d/system-config-run.yaml
@@ -249,6 +249,8 @@
       run_playbooks:
         - playbooks/service-nameserver.yaml
         - playbooks/letsencrypt.yaml
+        # Run twice to ensure correct behavior on a second pass
+        - playbooks/letsencrypt.yaml
       # Make sure this test runs acme.sh
       letsencrypt_self_generate_tokens: False
     host-vars: