diff --git a/tasks/main.yml b/tasks/main.yml
index 22dd132..3e838f5 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -60,6 +60,9 @@
         src: "{{ role_path }}/vault/secret.exs"
         dest: "/etc/pleroma/secret.exs"
         follow: yes
+        owner: "nobody"
+        group: "root"
+        mode: "700"
   tags:
         - pleroma
         - vault