diff --git a/tasks/main.yml b/tasks/main.yml
index e8099ed..6784ff8 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -26,7 +26,7 @@
     group: "{{ item.group|d('pdns') }}"
     mode: "{{ item.mode|d('0755') }}"
   with_items:
-  - { "path": "/var/lib/powerdns/letsencrypt/", "owner": "letsencrypt" }
+  - { "path": "/var/lib/powerdns/letsencrypt/", "owner": "letsencrypt", "mode": "0775" }
 
 - name: ensure database permissions
   file: