diff --git a/roles/flyspray/tasks/main.yml b/roles/flyspray/tasks/main.yml
index de5e29ae3f523faeb142dd1150371eb95f824fe7..144d34a2923b8b8aa413b76dec4e99e9fdc8b8e0 100644
--- a/roles/flyspray/tasks/main.yml
+++ b/roles/flyspray/tasks/main.yml
@@ -17,6 +17,9 @@
 - name: make nginx log dir
   file: path=/var/log/nginx/{{ flyspray_domain }} state=directory owner=http group=log mode=755
 
+- name: create setup dir with write permissions
+  file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=755
+
 - name: clone flyspray repo
   git: repo=https://git.archlinux.org/vhosts/bugs.archlinux.org.git dest="{{ flyspray_dir }}"
   become: true
@@ -26,6 +29,9 @@
 - name: fix home permissions
   file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}"
 
+- name: take away setup dir write permissions
+  file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=000
+
 - name: configure flyspray
   template: src=flyspray.conf.php.j2 dest=/srv/http/flyspray/flyspray.conf.php owner="{{ flyspray_user }}" group="{{ flyspray_user }}" mode=0660
   register: config