diff --git a/uwsgi-python/tasks/app.yml b/uwsgi-python/tasks/app.yml
index d5285dd3f205fcbc6d9df565be58dee6ec9f41c4..c0ff9a56b3e9cf38b8d080ecf8f9e9f034245c16 100644
--- a/uwsgi-python/tasks/app.yml
+++ b/uwsgi-python/tasks/app.yml
@@ -202,6 +202,10 @@
     - "{{ app.app }}"
     - "{{ app.instance }}"
 
+- name: remount /tmp exec # noqa 303 503
+  command: mount -o rw,remount,exec /tmp
+  when: app_exectmp|default(false)
+
 - name: ensure we have a virtualenv  # noqa 403
   pip:
     requirements: "{{ app_path }}/{{ app_requirements_file }}"
@@ -238,6 +242,10 @@
     - "{{ app.app }}"
     - "{{ app.instance }}"
 
+- name: remount /tmp exec # noqa 303 503
+  command: mount -o rw,remount,noexec /tmp
+  when: app_exectmp|default(false)
+
 - name: Create bundler directories with user permissions
   file:
     path: "{{ item }}"
diff --git a/uwsgi-python/vars/pretix.yml b/uwsgi-python/vars/pretix.yml
index 9db49bd4ce9a7487ed634b6c97a7d04fdf19e081..292cb2d21151a69f82b5d6584b2cbf5162edbba0 100644
--- a/uwsgi-python/vars/pretix.yml
+++ b/uwsgi-python/vars/pretix.yml
@@ -42,6 +42,7 @@ app_git_version: 'stable'  # release/2.4.x
 app_git_pip: true
 app_git_pip_query: '#egg=pretix&subdirectory=src'
 app_requirements_file: ''
+app_exectmp: true
 
 app_config_file: 'pretix.cfg'
 app_secret_config: false