diff --git a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb
index b0c8f3d..ae43c32 100644
--- a/site-cookbooks/kosmos-base/recipes/letsencrypt.rb
+++ b/site-cookbooks/kosmos-base/recipes/letsencrypt.rb
@@ -15,7 +15,14 @@ end
 
 package "certbot"
 
-file "/etc/letsencrypt/renewal-hooks/post/nginx" do
+directory "/etc/letsencrypt/renewal-hooks" do
+  recursive true
+  mode 0755
+  owner "root"
+  group "root"
+end
+
+file "/etc/letsencrypt/renewal-hooks/deploy/nginx" do
   content <<-EOF
 #!/usr/bin/env bash
 # Reloading nginx is enough to read the new certificates