diff --git a/host_vars/proxy-ovh.adm.auro.re.yml b/host_vars/proxy-ovh.adm.auro.re.yml
index 1c4cba6..13f0a1d 100644
--- a/host_vars/proxy-ovh.adm.auro.re.yml
+++ b/host_vars/proxy-ovh.adm.auro.re.yml
@@ -1,4 +1,12 @@
 ---
+loc_certbot:
+  - dns_rfc2136_server: '10.128.0.30'
+    dns_rfc2136_name: certbot_challenge.
+    dns_rfc2136_secret: "{{ vault_certbot_dns_secret }}"
+    mail: tech.aurore@lists.crans.org
+    certname: auro.re
+    domains: "auro.re, *.auro.re"
+
 loc_reverseproxy:
   redirect_sites:
     - from: www.auro.re
diff --git a/roles/certbot/tasks/main.yml b/roles/certbot/tasks/main.yml
index c14ccb5..8404b4d 100644
--- a/roles/certbot/tasks/main.yml
+++ b/roles/certbot/tasks/main.yml
@@ -28,7 +28,7 @@
   file:
     path: /etc/letsencrypt/conf.d
     state: directory
-    mode: 0644
+    mode: 0755
 
 - name: Add Certbot configuration
   template: