diff --git a/firmware/firmware.freifunk.lu.yml b/firmware/firmware.freifunk.lu.yml
index aa2fcadd2da2c16128ab5351557c8e77d8097ced..30a93afcf966f2cc262aa6e1a6c7c8b448177021 100644
--- a/firmware/firmware.freifunk.lu.yml
+++ b/firmware/firmware.freifunk.lu.yml
@@ -5,19 +5,23 @@
   vars:
     server_name: 'firmware.freifunk.lu'
     document_root: /var/www/firmware.freifunk.lu
+  handlers:
+    - name: Restart Nginx
+      ansible.builtin.service:
+        name: nginx
+        state: restarted
+
   tasks:
-    - name: Update apt cache and install Nginx
+    - name: Install nginx
       ansible.builtin.apt:
         name: nginx
-
-# Create directory  firmware.freifunk.lu
-    - name: Create the directory firmware.freifunk.lu in /var/www if it does not exist
+    - name: Create webroot for firmware.freifunk.lu
       ansible.builtin.file:
         path: /var/www/firmware.freifunk.lu
         state: directory
-        mode: '0755'
-
-
+        mode: '0775'
+        owner: root
+        group: sudo
     - name: Apply Nginx template
       ansible.builtin.template:
         src: /etc/ansible/playbooks/files/firmware.conf.j2
@@ -26,16 +30,9 @@
         group: root
         mode: "0644"
       notify: Restart Nginx
-
     - name: Enable new site
       ansible.builtin.file:
         src: /etc/nginx/sites-available/firmware.freifunk.lu
         dest: /etc/nginx/sites-enabled/firmware.freifunk.lu
         state: link
       notify: Restart Nginx
-
-  handlers:
-    - name: Restart Nginx
-      ansible.builtin.service:
-        name: nginx
-        state: restarted