diff --git a/nixos/modules/security/acme.nix b/nixos/modules/security/acme.nix
index b0f2f7265c5..6b62e5043ca 100644
--- a/nixos/modules/security/acme.nix
+++ b/nixos/modules/security/acme.nix
@@ -272,13 +272,12 @@ let
 
       # Working directory will be /tmp
       script = ''
-        set -euo pipefail
+        set -euxo pipefail
 
         ${optionalString (data.webroot != null) ''
           # Ensure the webroot exists
           mkdir -p '${data.webroot}/.well-known/acme-challenge'
-          chown 'acme:${data.group}' ${data.webroot}/{.well-known,.well-known/acme-challenge} \
-          || echo "Please fix the permissions under ${data.webroot}/.well-known/acme-challenge" && exit 1
+          chown 'acme:${data.group}' ${data.webroot}/{.well-known,.well-known/acme-challenge}
         ''}
 
         echo '${domainHash}' > domainhash.txt