diff --git a/roles/icecast2/tasks/main.yml b/roles/icecast2/tasks/main.yml
index 371b2ae..87184fe 100644
--- a/roles/icecast2/tasks/main.yml
+++ b/roles/icecast2/tasks/main.yml
@@ -9,6 +9,6 @@
   ansible.builtin.template:
     src: icecast.xml.j2
     dest: /etc/icecast2/icecast.xml
-    mode: 0644
+    mode: 0640
   notify:
     - Restart icecast2