diff --git a/roles/tftp/tasks/main.yml b/roles/tftp/tasks/main.yml
index 7f5d3c4..0506730 100644
--- a/roles/tftp/tasks/main.yml
+++ b/roles/tftp/tasks/main.yml
@@ -59,6 +59,9 @@
         [Service]
         ExecStart=
         ExecStart=/usr/sbin/in.tftpd -s /srv/tftpboot -u tftpd -c -v
+      mode: 0644
+      owner: root
+      group: "{{ ansible_wheel }}"
     notify: restart tftpd
 
   - name: enable service