diff --git a/security/lego/Makefile b/security/lego/Makefile
index 92800c19e62a..785bd5550733 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,44 +1,43 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	5.2.1
-PORTREVISION=	1
+DISTVERSION=	5.2.2
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
 USES=		go:modules
 GO_MODULE=	github.com/go-acme/lego/v5
 GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample lego.yml.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 .if ${LEGO_USER} == _lego
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 .endif
 GROUPS+=	www
 PLIST_SUB=	LEGO_USER=${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS} \
 		 ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		 ${STAGEDIR}${ETCDIR} \
 		 ${STAGEDIR}${WWWDIR}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${SAMPLE_FILES:C|^|${WRKDIR}/|} ${STAGEDIR}${ETCDIR}
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index f46f10955274..32138e95f986 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1780313524
-SHA256 (go/security_lego/lego-v5.2.1/v5.2.1.mod) = b27760ca7d3f57ccd0f6c1252358420faa83a886fd477f53e4ed82940d02a2e4
-SIZE (go/security_lego/lego-v5.2.1/v5.2.1.mod) = 10895
-SHA256 (go/security_lego/lego-v5.2.1/v5.2.1.zip) = 8271825d08e4b6eeb8e22b37d117b2cc2a23abe978ee9ca14c19bfc17dd000de
-SIZE (go/security_lego/lego-v5.2.1/v5.2.1.zip) = 2410294
+TIMESTAMP = 1780757670
+SHA256 (go/security_lego/lego-v5.2.2/v5.2.2.mod) = b27760ca7d3f57ccd0f6c1252358420faa83a886fd477f53e4ed82940d02a2e4
+SIZE (go/security_lego/lego-v5.2.2/v5.2.2.mod) = 10895
+SHA256 (go/security_lego/lego-v5.2.2/v5.2.2.zip) = cda09848095f390e2d48cd9b07739aacb08c4eefe0bf099f4af6093d86171e08
+SIZE (go/security_lego/lego-v5.2.2/v5.2.2.zip) = 2410470
diff --git a/security/lego/pkg-plist b/security/lego/pkg-plist
index d701e668cd35..e2a1ecce1da7 100644
--- a/security/lego/pkg-plist
+++ b/security/lego/pkg-plist
@@ -1,9 +1,9 @@
 bin/lego
 @dir(%%LEGO_USER%%,%%LEGO_USER%%,0700) etc/lego
 @dir(,,0755) etc/ssl
 @dir(%%LEGO_USER%%,%%LEGO_USER%%,0755) etc/ssl/lego
 @dir(%%LEGO_USER%%,www,) %%WWWDIR%%
 @sample etc/lego/deploy.sh.sample
 @sample(%%LEGO_USER%%,%%LEGO_USER%%,0700) etc/lego/lego.sh.sample
-@sample(%%LEGO_USER%%,%%LEGO_USER%%,0700) etc/lego/lego.yml.sample
+@sample(%%LEGO_USER%%,%%LEGO_USER%%,0600) etc/lego/lego.yml.sample
 etc/periodic/weekly/604.lego