diff --git a/roles/pxe/tasks/main.yml b/roles/pxe/tasks/main.yml
index 5772f0f..eb0db60 100644
--- a/roles/pxe/tasks/main.yml
+++ b/roles/pxe/tasks/main.yml
@@ -34,3 +34,28 @@
   - current
   tags:
   - permissions
+
+- name: ensure kickstart www directory exists
+  file:
+    path: /var/www/html/kickstart
+    owner: root
+    group: root
+    mode: u=rwx,go=rx
+    state: directory
+  tags:
+  - kickstart
+- name: ensure pxeadmins can write to kickstart directory
+  acl:
+    path: /var/www/html/kickstart
+    entity: pxeadmins
+    etype: group
+    permissions: rwX
+    recursive: True
+    default: '{{ item == "default" }}'
+    state: present
+  loop:
+  - default
+  - current
+  tags:
+  - kickstart
+  - permissions