diff --git a/scripts/before_install.sh b/scripts/before_install.sh
index e83310e..b8c370f 100644
--- a/scripts/before_install.sh
+++ b/scripts/before_install.sh
@@ -21,8 +21,8 @@ if [ ! -f "$CERT_DIR" ]; then
     sudo apt install -y certbot
     sudo certbot certonly --standalone -d $DOMAIN --email $EMAIL --agree-tos --non-interactive
     if [ $? -eq 0 ]; then
-        sudo chmod 755 "$CERT_DIR/privkey.pem"
-        sudo chmod 755 "$CERT_DIR/fullchain.pem"
+        sudo apt-get -y install acl
+        sudo setfacl -m u:ubuntu:--x /etc/letsencrypt/archive
   fi
 fi