diff --git a/tasks/main.yml b/tasks/main.yml
index 2099d02..e8099ed 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -10,6 +10,14 @@
     password: '*'
     system: True
 
+- name: add pdns user to letsencrypt group
+  user:
+    name: pdns
+    groups: letsencrypt
+    append: yes
+  notify:
+  - restart powerdns
+
 - name: create folders
   file:
     path: "{{ item.path }}"
@@ -25,7 +33,7 @@
     path: "{{ powerdns.letsencrypthandler.dbpath }}"
     owner: letsencrypt
     group: pdns
-    mode: 0644
+    mode: 0664
     state: touch
 
 - name: copy powerdns letsencrypt handler