diff --git a/roles/pagure/templates/0_pagure.conf b/roles/pagure/templates/0_pagure.conf
index 7a6d7f3759..594c28fec3 100644
--- a/roles/pagure/templates/0_pagure.conf
+++ b/roles/pagure/templates/0_pagure.conf
@@ -97,7 +97,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
 {% else %}
   SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert
   SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert
-  SSLCertificateKeyFile /etc/pki/tls/certs/pagure.io.key
+  SSLCertificateKeyFile /etc/pki/tls/private/pagure.io.key
 {% endif %}
 
   SetEnv GIT_PROJECT_ROOT /srv/git/repositories
@@ -187,7 +187,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
 {% else %}
   SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert
   SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert
-  SSLCertificateKeyFile /etc/pki/tls/certs/pagure.io.key
+  SSLCertificateKeyFile /etc/pki/tls/private/pagure.io.key
 {% endif %}
 
   # redirects for sssd docs. 
@@ -227,7 +227,7 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
   SSLEngine on
   SSLCertificateFile /etc/pki/tls/certs/pagure.io.cert
   SSLCertificateKeyFile /etc/pki/tls/private/pagure.io.key
-  SSLCertificateChainFile /etc/pki/tls/certs/pagure.io.intermediate.cert
+  SSLCertificateChainFile /etc/pki/tls/private/pagure.io.intermediate.cert
   SSLHonorCipherOrder On
   SSLProtocol {{ ssl_protocols }}
   SSLCipherSuite {{ ssl_ciphers }}