diff --git a/site-modules/profile/templates/letsencrypt/letsencrypt_gandi_livedns.erb b/site-modules/profile/templates/letsencrypt/letsencrypt_gandi_livedns.erb
--- a/site-modules/profile/templates/letsencrypt/letsencrypt_gandi_livedns.erb
+++ b/site-modules/profile/templates/letsencrypt/letsencrypt_gandi_livedns.erb
@@ -8,11 +8,11 @@
 import logging
 import os
 import sys
+import time
 import urllib.parse
 
-import yaml
 import requests
-
+import yaml
 
 logger = logging.getLogger(__name__)
 
@@ -198,6 +198,8 @@
         acme_records = get_acme_records(domain_config)
         acme_records.add(certbot_validation)
         set_acme_records(domain_config, acme_records)
+        # Give Gandi's anycast DNS time to sync...
+        time.sleep(5)
     elif sys.argv[1] == 'cleanup':
         if not certbot_validation:
             usage()