diff --git a/.etckeeper b/.etckeeper
index 9fa903b3..12064bae 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -1305,6 +1305,7 @@ maybe chmod 0644 'ld.so.conf.d/libc.conf'
 maybe chmod 0755 'ldap'
 maybe chmod 0644 'ldap/ldap.conf'
 maybe chmod 0755 'letsencrypt'
+maybe chmod 0600 'letsencrypt/.certbot.lock'
 maybe chmod 0700 'letsencrypt/accounts'
 maybe chmod 0700 'letsencrypt/accounts/acme-v01.api.letsencrypt.org'
 maybe chmod 0700 'letsencrypt/accounts/acme-v01.api.letsencrypt.org/directory'
diff --git a/letsencrypt/.certbot.lock b/letsencrypt/.certbot.lock
new file mode 100644
index 00000000..e69de29b