diff --git a/tasks/main.yml b/tasks/main.yml
index 08cbf0d..884bf4c 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -2,6 +2,9 @@
   copy:
     src: "dh-{{ item }}.pem"
     dest: "/etc/ssl/dh-{{ item }}.pem"
+    mode: 0644
+    owner: root
+    group: root
   with_items:
     - 1024
     - 2048