diff --git a/roles/mgrote.cv4pve-autosnap/tasks/main.yml b/roles/mgrote.cv4pve-autosnap/tasks/main.yml
index 346e439b..4ccb1463 100644
--- a/roles/mgrote.cv4pve-autosnap/tasks/main.yml
+++ b/roles/mgrote.cv4pve-autosnap/tasks/main.yml
@@ -46,7 +46,7 @@
       state: touch
       owner: root
       group: root
-      mode: 0644
+      mode: 0640
       access_time: preserve
       modification_time: preserve
 
diff --git a/roles/mgrote.restic/tasks/main.yml b/roles/mgrote.restic/tasks/main.yml
index e70620da..0b268a00 100644
--- a/roles/mgrote.restic/tasks/main.yml
+++ b/roles/mgrote.restic/tasks/main.yml
@@ -73,7 +73,7 @@
       state: touch
       owner: root
       group: root
-      mode: 0644
+      mode: 0640
       access_time: preserve
       modification_time: preserve