diff --git a/site/profiles/manifests/reposync/webserver.pp b/site/profiles/manifests/reposync/webserver.pp
index b75782d..675d376 100644
--- a/site/profiles/manifests/reposync/webserver.pp
+++ b/site/profiles/manifests/reposync/webserver.pp
@@ -10,6 +10,10 @@ class profiles::reposync::webserver (
   Enum['puppet', 'vault'] $nginx_cert_type = 'vault'
 ) {
 
+  # ensure all the required directories exist
+  mkdir::p { $www_root: }
+  mkdir::p { $cache_root: }
+
   # select the certificates to use based on cert type
   case $nginx_cert_type {
     'puppet': {