diff --git a/.sync.yml b/.sync.yml
index 130aaeb3..4d983e98 100644
--- a/.sync.yml
+++ b/.sync.yml
@@ -3,3 +3,5 @@
   enabled_lint_checks:
     - parameter_documentation
     - parameter_types
+spec/spec_helper.rb:
+  facterdb_string_keys: true
diff --git a/spec/classes/letsencrypt_spec.rb b/spec/classes/letsencrypt_spec.rb
index 1abe1252..edb65dd5 100644
--- a/spec/classes/letsencrypt_spec.rb
+++ b/spec/classes/letsencrypt_spec.rb
@@ -17,8 +17,7 @@
         describe 'with defaults' do
           it { is_expected.to compile }
 
-          epel = facts[:osfamily] == 'RedHat' && facts[:operatingsystem] != 'Fedora'
-
+          epel = facts['os']['family'] == 'RedHat' && facts['os']['name'] != 'Fedora'
           it 'contains the correct resources' do
             is_expected.to contain_class('letsencrypt::install').
               with(configure_epel: epel).
@@ -33,7 +32,7 @@
                    cron_monthday: ['*'])
             is_expected.to contain_cron('letsencrypt-renew').with_ensure('absent')
 
-            if facts[:osfamily] == 'FreeBSD'
+            if facts['os']['family'] == 'FreeBSD'
               is_expected.to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini email foo@example.com')
               is_expected.to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini server https://acme-v02.api.letsencrypt.org/directory')
               is_expected.to contain_file('letsencrypt-renewal-hooks-puppet').
@@ -50,7 +49,7 @@
               is_expected.to contain_file('letsencrypt-renewal-hooks-puppet').with_path('/etc/letsencrypt/renewal-hooks-puppet')
             end
 
-            if facts[:osfamily] == 'RedHat'
+            if facts['os']['family'] == 'RedHat'
               if epel
                 is_expected.to contain_class('epel').that_comes_before('Package[letsencrypt]')
               else
@@ -60,20 +59,20 @@
               is_expected.to contain_class('letsencrypt').with(package_command: 'certbot')
               is_expected.to contain_package('letsencrypt').with(name: 'certbot').with_ensure('installed')
               is_expected.to contain_file('/etc/letsencrypt').with(ensure: 'directory')
-            elsif facts[:osfamily] == 'Debian'
+            elsif facts['os']['family'] == 'Debian'
               is_expected.to contain_class('letsencrypt::install').with(package_name: 'certbot')
               is_expected.to contain_file('/etc/letsencrypt').with(ensure: 'directory')
-            elsif facts[:operatingsystem] == 'Gentoo'
+            elsif facts['os']['name'] == 'Gentoo'
               is_expected.to contain_class('letsencrypt::install').with(package_name: 'app-crypt/certbot')
               is_expected.to contain_class('letsencrypt').with(package_command: 'certbot')
               is_expected.to contain_package('letsencrypt').with(name: 'app-crypt/certbot').with_ensure('installed')
               is_expected.to contain_file('/etc/letsencrypt').with(ensure: 'directory')
-            elsif facts[:operatingsystem] == 'OpenBSD'
+            elsif facts['os']['name' == 'OpenBSD'
               is_expected.to contain_class('letsencrypt::install').with(package_name: 'certbot')
               is_expected.to contain_class('letsencrypt').with(package_command: 'certbot')
               is_expected.to contain_package('letsencrypt').with(name: 'certbot').with_ensure('installed')
               is_expected.to contain_file('/etc/letsencrypt').with(ensure: 'directory')
-            elsif facts[:operatingsystem] == 'FreeBSD'
+            elsif facts['os']['name' == 'FreeBSD'
               is_expected.to contain_class('letsencrypt::install').with(package_name: 'py39-certbot')
               is_expected.to contain_class('letsencrypt').with(package_command: 'certbot')
               is_expected.to contain_package('letsencrypt').with(name: 'py39-certbot').with_ensure('installed')
@@ -100,7 +99,7 @@
         describe 'with custom config' do
           let(:additional_params) { { config: { 'foo' => 'bar' } } }
 
-          case facts[:operatingsystem]
+          case facts['os']['name']
           when 'FreeBSD'
             it { is_expected.to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini foo bar') }
           else
@@ -237,7 +236,7 @@
 
         it { is_expected.to compile.with_all_deps }
 
-        case facts[:operatingsystem]
+        case facts['os']['name']
         when 'FreeBSD'
           it { is_expected.to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini email foo@example.com') }
         else
@@ -253,7 +252,7 @@
         context 'with unsafe_registration set to true' do
           let(:params) { { unsafe_registration: true } }
 
-          case facts[:operatingsystem]
+          case facts['os']['name']
           when 'FreeBSD'
             it { is_expected.not_to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini email foo@example.com') }
             it { is_expected.to contain_ini_setting('/usr/local/etc/letsencrypt/cli.ini register-unsafely-without-email true') }
diff --git a/spec/classes/plugin/dns_rfc2136_spec.rb b/spec/classes/plugin/dns_rfc2136_spec.rb
index e9e7ddfe..ac4c7605 100644
--- a/spec/classes/plugin/dns_rfc2136_spec.rb
+++ b/spec/classes/plugin/dns_rfc2136_spec.rb
@@ -15,7 +15,7 @@ class { 'letsencrypt':
         PUPPET
       end
       let(:package_name) do
-        case facts[:os]['family']
+        case facts['os']['family']
         when 'FreeBSD'
           'py39-certbot-dns-rfc2136'
         when 'OpenBSD'
@@ -39,7 +39,7 @@ class { 'letsencrypt':
         end
 
         # FreeBSD uses a different filesystem path
-        let(:pathprefix) { facts[:kernel] == 'FreeBSD' ? '/usr/local' : '' }
+        let(:pathprefix) { facts['kernel'] == 'FreeBSD' ? '/usr/local' : '' }
 
         it do
           if package_name.empty?
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index 58c9b66a..d9a3f293 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -10,7 +10,7 @@
 require 'voxpupuli/test/spec_helper'
 
 RSpec.configure do |c|
-  c.facterdb_string_keys = false
+  c.facterdb_string_keys = true
 end
 
 add_mocked_facts!