diff --git a/roles/relayd/tasks/main.yml b/roles/relayd/tasks/main.yml
index bb825f4..fd362b5 100644
--- a/roles/relayd/tasks/main.yml
+++ b/roles/relayd/tasks/main.yml
@@ -4,7 +4,7 @@
   template:
     dest: /etc/relayd.conf
     src: relayd.conf.j2
-    mode: 0644
+    mode: 0600
     owner: root
     group: "{{ ansible_wheel }}"
   notify: restart relayd