diff --git a/certbotd.sh b/certbotd.sh
index 28f790a..ce21078 100755
--- a/certbotd.sh
+++ b/certbotd.sh
@@ -29,7 +29,7 @@ ensure() {
   # awkward.  A restricted rsync treats / as the remote location for the
   # certificates.
   for NODE in ${NODES}; do
-    rsync -avHAX --delete-after /etc/letsencrypt/ ${NODE}:/
+    rsync -avHAXL --delete-after /etc/letsencrypt/live/ ${NODE}:/live/
   done
 }