diff --git a/tasks/install.yml b/tasks/install.yml
index a58d57e..c5d4775 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -66,6 +66,7 @@
           # Ansible managed.
           # File not in use.
         dest: /etc/nginx/conf.d/default.conf
+        mode: 0640
 
     - name: Update header.conf
       template: