diff --git a/roles/acme.sh/files/acme.sh-reload.service b/roles/acme.sh/files/acme.sh-reload.service
index 1e02b99..034a0b8 100644
--- a/roles/acme.sh/files/acme.sh-reload.service
+++ b/roles/acme.sh/files/acme.sh-reload.service
@@ -5,3 +5,4 @@ Description=Reload NGINX on command from acme.sh
 Type=oneshot
 ExecStart=/usr/bin/systemctl restart nginx
 ExecStart=/usr/bin/rm /srv/acme.sh/.reload
+ExecStart=/usr/bin/chmod -R 755 /srv/certs