diff --git a/tasks/create-cert-cloud-init.yml b/tasks/create-cert-cloud-init.yml
index feb0e73..0eaff34 100644
--- a/tasks/create-cert-cloud-init.yml
+++ b/tasks/create-cert-cloud-init.yml
@@ -13,6 +13,7 @@
   template:
     src: certbot-init.sh.j2
     dest: "/var/lib/cloud/scripts/per-instance/certbot-init-{{ cert_item.domains | first | replace('*.', '') }}.sh"
+    mode: +rx
 
 - name: Ensure test certificates are created.
   command: "{{ certbot_create_command }} --test-cert"