diff --git a/tasks/main.yml b/tasks/main.yml
index f00d807..ade2b5e 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -69,6 +69,7 @@
     copy:
       content: "{{ item.content | b64decode }}"
       dest: "/etc/ssl/scraper_{{ item.item }}.crt"
+      mode: 0644
   - name: copy stunnel config
     template:
       src: stunnel-client.conf.j2
@@ -80,6 +81,7 @@
     copy:
       content: "{{ agentcertfiles.content | b64decode }}"
       dest: "/etc/prometheus/targetcerts/{{ inventory_hostname }}.crt"
+      mode: 0644
 
 - set_fact:
     labels_ansible_groups: '{ {% for g in group_names %}"ansible_group_{{g}}": 1{% if not loop.last %}, {% endif %}{% endfor %} }'
@@ -91,9 +93,11 @@
   template:
     src: node-scraper.j2
     dest: /etc/prometheus/conf.d/scrape_configs/agent_{{ inventory_hostname }}.conf
+    mode: 0644
 - name: setup alerts
   loop: "{{ prometheus_agent.scrapers.keys()|list }}"
   delegate_to: "{{ item }}"
   template:
     src: node-alerts.j2
     dest: /etc/prometheus/conf.d/rule_files/agent_{{ inventory_hostname }}.conf
+    mode: 0644