diff --git a/home/.chezmoiscripts/universal/run_onchange_before_91-configure-gpg.tmpl b/home/.chezmoiscripts/universal/run_onchange_before_91-configure-gpg.tmpl
index 99fffeeb..be04ea6f 100644
--- a/home/.chezmoiscripts/universal/run_onchange_before_91-configure-gpg.tmpl
+++ b/home/.chezmoiscripts/universal/run_onchange_before_91-configure-gpg.tmpl
@@ -20,7 +20,7 @@ if [ -n "$KEYID" ] && command -v gpg > /dev/null; then
   KEYID_TRIMMED="$(echo "$KEYID" | sed 's/^0x//')"
   if ! gpg --list-secret-keys --keyid-format=long | grep "$KEYID_TRIMMED" > /dev/null; then
     logg info 'Attempting to download the specified public GPG key (`{{ .user.gpg.id }}`) from public keyservers'
-    gpg --recv "$KEYID" || EXIT_CODE=$?
+    gpg --recv "$KEYID" --keyserver hkps://keyserver.ubuntu.com || EXIT_CODE=$?
     if [ -n "$EXIT_CODE" ]; then
       logg warn 'Error downloading public GPG key'
       logg info 'Retrying after turning on debug mode and using the standard DNS resolver'