diff --git a/roles/nextcloud/tasks/main.yml b/roles/nextcloud/tasks/main.yml
index e026cad..870e84b 100644
--- a/roles/nextcloud/tasks/main.yml
+++ b/roles/nextcloud/tasks/main.yml
@@ -79,13 +79,18 @@
               remote_src: yes
               dest: "{{ nextcloud_webroot }}"
               extra_opts: [--strip-components=1]
+          - name: Create data directory
+            file:
+              path: "{{ nextcloud_webroot }}/data"
+              state: directory
           - name: Chown webroot
+            # Nextcloud docs say Apache needs write access, so it gets write access
             file:
               path: "{{ nextcloud_webroot }}"
               state: directory
               recurse: yes
-              owner: root
-              group: root
+              owner: www-data
+              group: www-data
           - name: Cleanup
             file:
               path: /var/www/nextcloud.tar.bz2