diff --git a/ansible/roles/nginx/tasks/main.yml b/ansible/roles/nginx/tasks/main.yml
index 7edbf2d..3cc90fc 100644
--- a/ansible/roles/nginx/tasks/main.yml
+++ b/ansible/roles/nginx/tasks/main.yml
@@ -38,6 +38,8 @@
     state: reloaded
     enabled: true
 - name: Setup cronjob for certificate renewal
+  become: true
+  become_user: root
   ansible.builtin.cron:
     name: certbot-renewal
     job: /bin/bash -lc 'certbot -q renew'