diff --git a/host-pottwal.yml b/host-pottwal.yml
index 921bf2f..c648344 100644
--- a/host-pottwal.yml
+++ b/host-pottwal.yml
@@ -135,6 +135,8 @@
       ansible.builtin.file:
         path: "{{ prosody_config_dir }}/certs"
         state: directory
+        # group 'ssl-cert' inside of the container
+        group: "101"
         mode: 0750
 
     - name: Ensure prosody conf.avail dir exists