diff --git a/tasks/main.yaml b/tasks/main.yaml
index d238330..2448a67 100644
--- a/tasks/main.yaml
+++ b/tasks/main.yaml
@@ -12,6 +12,14 @@
       - python-psycopg2 # for ansible
       - postgresql
       - python3-psycopg2
+      - ssl-cert
+
+- name: set correct permissions for /etc/ssl/private
+  file:
+    path: /etc/ssl/private
+    mode: 0750
+    owner: root
+    group: ssl-cert
 
 - name: install buildbot
   pip: