diff --git a/site-cookbooks/kosmos-base/resources/tls_cert_for.rb b/site-cookbooks/kosmos-base/resources/tls_cert_for.rb
index c359ac4..02e73d2 100644
--- a/site-cookbooks/kosmos-base/resources/tls_cert_for.rb
+++ b/site-cookbooks/kosmos-base/resources/tls_cert_for.rb
@@ -36,8 +36,8 @@ action :create do
         --agree-tos \
         --manual-auth-hook '#{hook_path} auth' \
         --manual-cleanup-hook '#{hook_path} cleanup' \
-        --deploy-hook /etc/letsencrypt/renewal-hooks/post/openresty \
         --email ops@kosmos.org \
+        #{node.run_list.roles.include?("openresty_proxy") ? '--deploy-hook /etc/letsencrypt/renewal-hooks/post/openresty' : nil } \
         #{domains.map {|d| "-d #{d}" }.join(" ")}
       CMD
       not_if do