diff --git a/CHANGELOG.md b/CHANGELOG.md
index ca3d69f5..7bb4aaa2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,7 +22,7 @@ The **patch** part changes incrementally at each release.
 * elasticsearch: use ES_TMPDIR variable for custom tmpdir, (from `/etc/default/elasticsearch` instead of changing `/etc/elesticsearch/jvm.options`).
 * elasticsearch: RESTART_ON_UPGRADE is configurable (default: `true`)
 * nagios-nrpe: mark plugins as executable
-* mongodb: configuration is forced by default but it's configurable (default: `true`)
+* mongodb: configuration is forced by default but it's configurable (default: `false`)
 * nginx: package name can be specified (default: `nginx-full`)
 
 ### Fixed
diff --git a/mongodb/README.md b/mongodb/README.md
index 8796089a..e876fe7c 100644
--- a/mongodb/README.md
+++ b/mongodb/README.md
@@ -12,6 +12,6 @@ Everything is in the `tasks/main.yml` file.
 
 * `mongodb_port`: port to listen to (default: `27017`)
 * `mongodb_bind`: IP to bind to (default: `127.0.0.1`)
-* `mongodb_force_config`: force copy the configuration (default: `true`)
+* `mongodb_force_config`: force copy the configuration (default: `false`)
 
 The full list of variables (with default values) can be found in `defaults/main.yml`.
diff --git a/mongodb/defaults/main.yml b/mongodb/defaults/main.yml
index e920d99d..ec255349 100644
--- a/mongodb/defaults/main.yml
+++ b/mongodb/defaults/main.yml
@@ -3,4 +3,6 @@
 mongodb_port: 27017
 mongodb_bind: 127.0.0.1
 
-mongodb_force_config: True
+# Warning: config must not be overwritten by default
+# otherwise it can disable important settings, like authorization :/
+mongodb_force_config: False