diff --git a/ssl/tasks/main.yml b/ssl/tasks/main.yml
index a739f449..c4f1bd10 100644
--- a/ssl/tasks/main.yml
+++ b/ssl/tasks/main.yml
@@ -12,7 +12,9 @@
   copy:
     src: "ssl/{{ ssl_cert }}.key"
     dest: "/etc/ssl/private/{{ ssl_cert }}.key"
-    mode: "0600"
+    mode: "0640"
+    owner: root
+    group: ssl-cert
   register: ssl_copy_key
   tags:
     - ssl