diff --git a/nginxinstall b/nginxinstall
index a63da52..2e50a63 100755
--- a/nginxinstall
+++ b/nginxinstall
@@ -32,6 +32,16 @@ mkdir -p /etc/nginx/secrets
 mkdir -p /etc/nginx/nginx-ratelimits
 mkdir -p /etc/nginx/nginx-snippets-local
 
+#
+# Set permissions
+#
+chown root:www-data /etc/nginx/secrets
+chmod 750 /etc/nginx/secrets
+chown root:root /etc/nginx/nginx-ratelimits
+chmod 751 /etc/nginx/nginx-ratelimits
+chown root:root /etc/nginx/nginx-snippets-local
+chmod 751 /etc/nginx/nginx-snippets-local
+
 #
 # Clone nginx-snippets; if nginx-snippets exists then just pull latest changes
 #
@@ -45,7 +55,7 @@ if [[ -d "$nginxsnippets/.git" ]]; then git -C "$nginxsnippets" pull --quiet; el
 apt install -y php-fpm php-curl php-dom php-gd php-imagick php-ldap php-mbstring php-mysql php-pear php-soap php-xml php-zip
 
 #
-# Install apache2-util this is for htpasswd support
+# Install apache2-util this provides htpasswd for optional HTTP Basic Authentication with Nginx
 #
 apt install -y apache2-utils