diff --git a/tasks/main.yml b/tasks/main.yml
index 07d0e71..c436c24 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -62,7 +62,9 @@
 - name: Add cron scipt to renew certificates
   ansible.builtin.template:
     dest: "{{ __lego_base_dir }}/bin/cron-lego-renew.sh"
-    mode: "0755"
+    mode: "0700"
+    owner: root
+    group: root
     src: cron-lego-renew.sh.j2
 
 - name: Add cron job to renew certificates