diff --git a/roles/cache_clear/cache_clear-opcache/defaults/main.yml b/roles/cache_clear/cache_clear-opcache/defaults/main.yml
index 222325ce..e851d795 100644
--- a/roles/cache_clear/cache_clear-opcache/defaults/main.yml
+++ b/roles/cache_clear/cache_clear-opcache/defaults/main.yml
@@ -7,6 +7,6 @@ cache_clear_opcache:
   # adapter: "127.0.0.1:9081" # Leave commented to automatically detect the adapter based on PHP version.
   # Bins to clear.
   clear_opcache: true
-  clear_apcu: false
-  clear_stat: false
+  clear_apcu: true
+  clear_stat: true
   # cachetool_bin: "/path/to/cachetool.phar" # see _init for paths if undefined
diff --git a/roles/database_apply/database_apply-drupal8/tasks/main.yml b/roles/database_apply/database_apply-drupal8/tasks/main.yml
index 7faa03c7..1935ac79 100644
--- a/roles/database_apply/database_apply-drupal8/tasks/main.yml
+++ b/roles/database_apply/database_apply-drupal8/tasks/main.yml
@@ -13,6 +13,21 @@
     - www_user != deploy_user
     - previous_build_number == 0
 
+- name: Fix file permissions for config directory.
+  ansible.builtin.file:
+    state: directory
+    path: "{{ deploy_path }}/{{ site.config_sync_directory }}"
+    owner: "{{ www_user }}"
+    group: "{{ www_user }}"
+    mode: '0775' # in this case often our deploy user is in the web user group and will need to be able to manipulate config
+  become: true
+  with_items: "{{ drupal.sites }}"
+  loop_control:
+    loop_var: site
+  when:
+    - www_user != deploy_user
+    - previous_build_number == 0
+
 - name: Install Drupal.
   ansible.builtin.command:
     cmd: "{{ drush_bin }} -l {{ site.folder }} {{ site.install_command }}"