diff --git a/Dockerfile b/Dockerfile
index c31e092..7cea1af 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,9 +10,9 @@ RUN apk add --no-cache --virtual .build-deps git build-base libffi-dev openssl-d
     && rm -r /root/.cache \
 
     && cd /tmp \
-    && git clone https://github.com/lukas2511/dehydrated.git \
+    && git clone https://github.com/dehydrated-io/dehydrated.git \
     && cd dehydrated \
-    && git checkout tags/v0.6.5 \
+    && git checkout tags/v0.7.0 \
     && cd .. \
     && chmod a+x dehydrated/dehydrated \
     && mv dehydrated/dehydrated /usr/bin/ \
diff --git a/config b/config
index 11d71c8..c5c9c88 100644
--- a/config
+++ b/config
@@ -85,6 +85,8 @@ KEYSIZE="4096"
 # Chain clean_challenge|deploy_challenge arguments together into one hook call per certificate (default: no)
 #HOOK_CHAIN="no"
 
+PREFERRED_CHAIN="issuer= /C=US/O=Internet Security Research Group/CN=ISRG Root X1"
+
 # Minimum days before expiration to automatically renew certificate (default: 30)
 #RENEW_DAYS="30"