diff --git a/roles/mariadb/tasks/main.yml b/roles/mariadb/tasks/main.yml
index ca11869..7464afa 100644
--- a/roles/mariadb/tasks/main.yml
+++ b/roles/mariadb/tasks/main.yml
@@ -96,13 +96,20 @@
     group: "{{ ansible_wheel }}"
   when: mariadb_root_password is defined
 
+- import_role:
+    name: sftpuser
+  vars:
+    chroot: /srv/backup
+    user: backup
+    publickeys: "{{ backup_publickeys }}"
+
 - name: create backup directory
   file:
     path: /export/backup
     state: directory
     mode: 0750
     owner: root
-    group: "{{ ansible_wheel }}"
+    group: backup
 
 - name: link backup directory
   file: