diff --git a/playbooks/groups/certgetter.yml b/playbooks/groups/certgetter.yml
index 95290922d0..d59f48fca9 100644
--- a/playbooks/groups/certgetter.yml
+++ b/playbooks/groups/certgetter.yml
@@ -18,6 +18,7 @@
   - fas_client
   - rsyncd
   - sudo
+  - apache
   - { role: openvpn/client,
       when: env != "staging" }
 
@@ -28,5 +29,8 @@
   - import_tasks: "{{ tasks_path }}/2fa_client.yml"
   - import_tasks: "{{ tasks_path }}/motd.yml"
 
+  - name: make sure certbot is installed
+    package: name=certbot state=installed
+
   handlers:
   - import_tasks: "{{ handlers_path }}/restart_services.yml"