diff --git a/site-modules/role/manifests/swh_sysadmin.pp b/site-modules/role/manifests/swh_sysadmin.pp
index 0d8bd024..fc7a1a77 100644
--- a/site-modules/role/manifests/swh_sysadmin.pp
+++ b/site-modules/role/manifests/swh_sysadmin.pp
@@ -1,33 +1,33 @@
 class role::swh_sysadmin inherits role::swh_server {
   include profile::prometheus::server
   include profile::grafana
 
   include profile::prometheus::sql
 
   include profile::puppet::master
 
   if $::subnet == 'vagrant' {
     notice("Vagrant environment detected, deactivate let's encrypt and bind_server")
   } else {
     include profile::letsencrypt
+    include profile::bind_server::primary
   }
 
   include profile::icinga2::icingaweb2
 
   include profile::apache::simple_server
   include ::apache::mod::rewrite
 
-  include profile::bind_server::primary
 
   include profile::annex_web
   include profile::stats_web
   include profile::docs_web
   include profile::debian_repository
   include profile::bitbucket_archive_web
 
   include profile::sentry::reverse_proxy
 
   include profile::weekly_report_bot
 
   include profile::opnsense::monitoring
 }