diff --git a/group_vars/mailman.yml b/group_vars/mailman.yml
index 842f513d2b5ea0da5fe8b0d32c98ade69f17cefb..19a39300b610500dd67416874425f5f7463910c6 100644
--- a/group_vars/mailman.yml
+++ b/group_vars/mailman.yml
@@ -74,6 +74,8 @@ glob_mailman3:
   restadmin_pass: "{{ vault.mailman3_restadmin_pass }}"
   archiver_key: "{{ vault.mailman3_archiver_key }}"
   web_secret_key: "{{ vault.mailman3_web_secret_key }}"
-  web_domain: "mailman.crans.org"
+  web_domains:
+    - "mailman.crans.org"
+    - "lists.crans.org"
   default_domain: "crans.org"
   postfix_domain: "crans.org"
diff --git a/roles/mailman3/templates/mailman3/mailman-web.py.j2 b/roles/mailman3/templates/mailman3/mailman-web.py.j2
index 81e856a24ed3b809fb784729d1199af75b3b1a5d..1d0c46f8058d10971886d5301ef93738d1f0d27b 100644
--- a/roles/mailman3/templates/mailman3/mailman-web.py.j2
+++ b/roles/mailman3/templates/mailman3/mailman-web.py.j2
@@ -16,9 +16,9 @@ ADMINS = (
 # is meant to run behind a webserver reverse proxy anyway.
 ALLOWED_HOSTS = [
     "localhost",  # Archiving API from Mailman, keep it.
-    "{{ mailman3.web_domain }}",
-    # Add here all production URLs you may have.
-    #'*'
+{% for domain in mailman3.web_domains %}
+    "{{ domain }}",
+{% endfor %}
 ]
 
 # Mailman API credentials