diff --git a/roles/https/tasks/main.yml b/roles/https/tasks/main.yml
index f177190..b2041c1 100644
--- a/roles/https/tasks/main.yml
+++ b/roles/https/tasks/main.yml
@@ -10,7 +10,6 @@
       file:
         path: "{{ item.dir }}"
         mode: "{{ item.mode }}"
-        recurse: yes
         owner: root
         group: www-data
         state: directory
@@ -26,6 +25,7 @@
     - name: Create certificate key
       openssl_privatekey:
         path: "/etc/pki/cert/private/{{ website_url }}.key"
+        mode: "0750"
     - name: Create CSR
       openssl_csr:
         path: "/etc/pki/cert/csr/{{ website_url }}.csr"