diff --git a/roles/mosquitto/tasks/main.yml b/roles/mosquitto/tasks/main.yml
index 5e29a25..2d09f14 100644
--- a/roles/mosquitto/tasks/main.yml
+++ b/roles/mosquitto/tasks/main.yml
@@ -39,8 +39,8 @@
   ansible.builtin.copy:
     dest: /etc/mosquitto/acl.conf
     src: "{{ ansible_private }}/files/mosquitto/acl.conf"
-    mode: "0640"
-    owner: root
+    mode: "0400"
+    owner: _mosquitto
     group: _mosquitto
   notify: Restart mosquitto
 
@@ -48,8 +48,8 @@
   ansible.builtin.copy:
     dest: /etc/mosquitto/passwd
     src: "{{ ansible_private }}/files/mosquitto/passwd"
-    mode: "0640"
-    owner: root
+    mode: "0400"
+    owner: _mosquitto
     group: _mosquitto
   notify: Restart mosquitto