diff --git a/roles/nftables_router/tasks/main.yml b/roles/nftables_router/tasks/main.yml
index ac00d92..6d58a18 100644
--- a/roles/nftables_router/tasks/main.yml
+++ b/roles/nftables_router/tasks/main.yml
@@ -19,6 +19,9 @@
   template:
     src: "{{ item }}.j2"
     dest: "/etc/{{ item }}"
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=
   loop:
     - nftables.d/10-vars.conf
     - nftables.d/20-blacklist.conf