diff --git a/main.tf b/main.tf
index 4d537e1..81a96bf 100644
--- a/main.tf
+++ b/main.tf
@@ -2,23 +2,23 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "3.79.0"
+      version = "3.87.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "2.45.0"
+      version = "2.47.0"
     }
     dns = {
       source  = "hashicorp/dns"
-      version = "3.2.3"
+      version = "3.4.0"
     }
     acme = {
       source  = "vancluever/acme"
-      version = "2.18.0"
+      version = "2.19.0"
     }
     tls = {
       source  = "hashicorp/tls"
-      version = "4.0.4"
+      version = "4.0.5"
     }
   }
   backend "azurerm" {
diff --git a/modules/common/main.tf b/modules/common/main.tf
index f23a699..e11ea98 100644
--- a/modules/common/main.tf
+++ b/modules/common/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     acme = {
       source  = "vancluever/acme"
-      version = "2.18.0"
+      version = "2.19.0"
     }
   }
 }
diff --git a/modules/recruiting/ghost/main.tf b/modules/recruiting/ghost/main.tf
index d65c77a..2a99bfe 100644
--- a/modules/recruiting/ghost/main.tf
+++ b/modules/recruiting/ghost/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     acme = {
       source  = "vancluever/acme"
-      version = "2.18.0"
+      version = "2.19.0"
     }
   }
 }
@@ -79,9 +79,9 @@ resource "azurerm_app_service_custom_hostname_binding" "tikjob_hostname_binding"
   app_service_name    = azurerm_linux_web_app.tikjob_ghost.name
   resource_group_name = var.tikweb_rg_name
 
-  lifecycle {
-    ignore_changes = [ssl_state, thumbprint]
-  }
+  # lifecycle {
+  #   ignore_changes = [ssl_state, thumbprint]
+  # }
 
   # Deletion may need manual work.
   # https://github.com/hashicorp/terraform-provider-azurerm/issues/11231
diff --git a/modules/tenttiarkisto/main.tf b/modules/tenttiarkisto/main.tf
index a22004a..050f895 100644
--- a/modules/tenttiarkisto/main.tf
+++ b/modules/tenttiarkisto/main.tf
@@ -143,9 +143,9 @@ resource "azurerm_app_service_custom_hostname_binding" "tenttiarkisto_hostname_b
   app_service_name    = azurerm_linux_web_app.tenttiarkisto.name
   hostname            = "tenttiarkisto.fi"
 
-  lifecycle {
-    ignore_changes = [ssl_state, thumbprint]
-  }
+  # lifecycle {
+  #   ignore_changes = [ssl_state, thumbprint]
+  # }
 
   depends_on = [
     azurerm_dns_txt_record.tenttiarkisto_txt_asuid,
@@ -167,9 +167,9 @@ resource "azurerm_app_service_custom_hostname_binding" "tenttiarkisto_www_hostna
   app_service_name    = azurerm_linux_web_app.tenttiarkisto.name
   hostname            = "www.tenttiarkisto.fi"
 
-  lifecycle {
-    ignore_changes = [ssl_state, thumbprint]
-  }
+  # lifecycle {
+  #   ignore_changes = [ssl_state, thumbprint]
+  # }
 
   depends_on = [
     azurerm_dns_cname_record.tenttiarkisto_cname_www,