diff --git a/tasks/setup.yml b/tasks/setup.yml
index 8d7d1e5..805ce75 100644
--- a/tasks/setup.yml
+++ b/tasks/setup.yml
@@ -3,12 +3,13 @@
     - name: Ensure service directory exists
       file:
         path: "{{ zigbee2mqtt_service_directory }}"
+        mode: 0750
         state: directory
-        mode: 0755
 
     - name: Create bind mount source directory
       file:
         path: "{{ item.name }}"
+        mode: 0750
         state: directory
       loop: "{{ zigbee2mqtt_volumes }}"
       loop_control:
@@ -34,6 +35,7 @@
     - name: Ensure device files exists
       file:
         path: "{{ item }}"
+        mode: 0640
         state: touch
         access_time: preserve
         modification_time: preserve