diff --git a/01-basic.sh b/01-basic.sh
index 268fcb0..250ab75 100755
--- a/01-basic.sh
+++ b/01-basic.sh
@@ -87,6 +87,7 @@ apt-get -y --no-install-recommends install nginx-light uwsgi uwsgi-plugin-python
 
 # Create a self-signed certificate
 openssl req -x509 -new -out /etc/ssl/certs/services.pem -keyout /etc/ssl/private/services.key -nodes -days 3654 -subj "/C=CZ/CN=$(hostname -f)"
+chgrp ssl-cert /etc/ssl/private/services.key
 chmod 640 /etc/ssl/private/services.key
 
 # Configure nginx