diff --git a/Dockerfile b/Dockerfile
index 5d68ca4..d6c7552 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,9 +5,9 @@ ENV EMAIL=${EMAIL:-test@email.tld}
 ENV USE_LETSENCRYPT=${USE_LETSENCRYPT:-false}
 
 COPY haraka.sh /haraka.sh
+COPY certbot-renew.sh /etc/cron.daily/certbot-renew.sh
 
-RUN chmod +x /haraka.sh /etc/cron.daily/certbot-renew.sh && \
-    echo "deb http://ftp.debian.org/debian jessie-backports main" >> /etc/apt/sources.list && \
+RUN echo "deb http://ftp.debian.org/debian jessie-backports main" >> /etc/apt/sources.list && \
     apt-get update && apt-get upgrade -y && apt-get -t jessie-backports install -y --no-install-recommends supervisor certbot cron git && \
     mkdir /var/log/supervisord && \
     mkdir /var/run/supervisord && \
@@ -18,11 +18,11 @@ RUN chmod +x /haraka.sh /etc/cron.daily/certbot-renew.sh && \
             --gid haraka \
             -r \
             -m \
-            haraka \
-    && chown -R haraka:haraka /haraka
+            haraka && \
+    chown -R haraka:haraka /haraka && \
+    chmod +x /haraka.sh /etc/cron.daily/certbot-renew.sh
 
 COPY supervisord.conf /etc/supervisor/supervisord.conf
-COPY certbot-renew.sh /etc/cron.daily/certbot-renew.sh
 
 # Port 80 is used for LetsEncrypt
 EXPOSE 25 80 587