@@ -117,6 +117,8 @@ function interactive_gpg_from_usb {
fi
echo $'Recovering LetsEncrypt keys'
cp -r $USB_MOUNT/letsencrypt/* /etc/letsencrypt
+ addgroup ssl-cert
+ chown -R root:ssl-cert /etc/letsencrypt
if [ -f $USB_MOUNT/.mastergpgkey ]; then