diff --git a/src/reverseproxy.js b/src/reverseproxy.js
index 1c837e56b..c1ca8a77b 100644
--- a/src/reverseproxy.js
+++ b/src/reverseproxy.js
@@ -386,6 +386,7 @@ function renewAll(auditSource, callback) {
 
         async.eachSeries(allApps, function (app, iteratorCallback) {
             ensureCertificate(app, auditSource, function (error, bundle) {
+                if (error) return iteratorCallback(error); // this can happen if cloudron is not setup yet
                 if (bundle.reason !== 'new-le' && bundle.reason !== 'fallback') return iteratorCallback();
 
                 // reconfigure for the case where we got a renewed cert after fallback