diff --git a/spoke-app-provision b/spoke-app-provision
index f45e287..a042657 100755
--- a/spoke-app-provision
+++ b/spoke-app-provision
@@ -77,6 +77,7 @@ PGSETUP
   mv -v /tmp/spoke.crt /home/spoke/spoke.crt
   mv -v /tmp/spoke.key /home/spoke/spoke.key
   chmod 0600 /home/spoke/spoke.crt /home/spoke/spoke.key
+  chown spoke /home/spoke/spoke.crt /home/spoke/spoke.key
   cp -v /tmp/nginx-sites-default.conf /etc/nginx/sites-available/default
   ln -svf /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
   sha1sum /etc/nginx/sites-available/default