diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..d2626f5
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,3 @@
+{
+        "svn.ignoreMissingSvnWarning": true
+}
\ No newline at end of file
diff --git a/openstack-tf/common_setups/10-main-network.tf b/openstack-tf/common_setups/10-main-network.tf
index 4ee4780..b2f0aa4 100644
--- a/openstack-tf/common_setups/10-main-network.tf
+++ b/openstack-tf/common_setups/10-main-network.tf
@@ -54,6 +54,20 @@ resource "openstack_networking_router_interface_v2" "private-network-routing" {
   subnet_id = openstack_networking_subnet_v2.main-private-subnet.id
 }
 
+locals {
+  acme_challenge_recordset_name = "_acme-challenge.${var.dns_zone.zone_name}"
+  acme_challenge_delegation = "_acme-challenge.d4science.net."
+}
+
+resource "openstack_dns_recordset_v2" "acme_challenge_recordset" {
+  zone_id     = var.dns_zone_id
+  name        = local.acme_challenge_recordset_name
+  description = "ACME challenge delegation"
+  ttl         = 8600
+  type        = "CNAME"
+  records     = [local.acme_challenge_delegation]
+}
+
 output "main_private_network_id" {
   description = "Main private network id"
   value       = openstack_networking_network_v2.main-private-network.id