diff --git a/tasks/install.yml b/tasks/install.yml
index ea7d9ec..8be304e 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -13,6 +13,7 @@
   file:
     path: "{{ item }}"
     state: directory
+    mode: 0750
   loop:
     - "{{ gitea_config_dir }}"
     - "{{ gitea_data_dir }}"
@@ -51,6 +52,7 @@
       template:
         src: "etc/systemd/system/gitea.service.j2"
         dest: "/etc/systemd/system/gitea.service"
+        mode: 0640
       notify: __gitea_restart
   become: True
   become_user: root