diff --git a/roles/mgrote_munin_server/defaults/main.yml b/roles/mgrote_munin_server/defaults/main.yml
index a1148584..95cbc2b8 100644
--- a/roles/mgrote_munin_server/defaults/main.yml
+++ b/roles/mgrote_munin_server/defaults/main.yml
@@ -30,7 +30,7 @@ munin_hosts:
   - name: "{{ ansible_fqdn }}"
     address: "127.0.0.1"
     extra: ["use_node_name yes"]
-    
+
 munin_mail_user: user
 munin_mail_pass: geheim
 munin_mail_server: mail.server.com
diff --git a/roles/mgrote_munin_server/tasks/main.yml b/roles/mgrote_munin_server/tasks/main.yml
index 9c0241b8..7f605c54 100644
--- a/roles/mgrote_munin_server/tasks/main.yml
+++ b/roles/mgrote_munin_server/tasks/main.yml
@@ -27,6 +27,9 @@
   ansible.builtin.template:
     src: apache.conf
     dest: /etc/apache2/sites-available/000-default.conf
+    mode: '0644'
+    owner: root
+    group: root
   notify: "restart apache2"
 
 - name: Enable fgcid
@@ -77,4 +80,7 @@
   ansible.builtin.template:
     src: ssmtp.conf
     dest: /etc/ssmtp/ssmtp.conf
+    mode: '0644'
+    owner: root
+    group: root
 ...