diff --git a/roles/collab/tasks/main.yml b/roles/collab/tasks/main.yml
index 6e3c8da..95c1446 100644
--- a/roles/collab/tasks/main.yml
+++ b/roles/collab/tasks/main.yml
@@ -27,6 +27,9 @@
   ansible.builtin.get_url:
     url: "https://static.moinmo.in/files/moin-{{ moin_version }}.tar.gz"
     dest: "{{ srcdir }}"
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
     checksum: sha1:3eb13b4730bd97259a41c4cd500f8433778ff8cf
 
 - name: Extract moin package