diff --git a/tasks/main.yml b/tasks/main.yml
index 36e9e7c..3aae91f 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -34,6 +34,9 @@
   template:
     src: prometheus.j2
     dest: /etc/default/prometheus
+    owner: root
+    group: root
+    mode: 0644
 
 - name: wrtie prometheus (base) config
   notify: regenerate prometheus config
@@ -49,6 +52,9 @@
   template:
     src: scrape_self.conf.j2
     dest: /etc/prometheus/conf.d/scrape_configs/selfscrape.conf
+    owner: root
+    group: root
+    mode: 0644
 
 - name: add config generating script
   notify: regenerate prometheus config