diff --git a/roles/postfix_non_mailhost/tasks/main.yml b/roles/postfix_non_mailhost/tasks/main.yml
index 12a3805..42f3482 100644
--- a/roles/postfix_non_mailhost/tasks/main.yml
+++ b/roles/postfix_non_mailhost/tasks/main.yml
@@ -11,4 +11,7 @@
   template:
     src: main.cf.j2
     dest: /etc/postfix/main.cf
+    mode: 0644
+    owner: root
+    group: root
   notify: restart postfix