diff --git a/roles/bittorrent/tasks/sonarr.yml b/roles/bittorrent/tasks/sonarr.yml
index 054a66c..b55637b 100644
--- a/roles/bittorrent/tasks/sonarr.yml
+++ b/roles/bittorrent/tasks/sonarr.yml
@@ -4,6 +4,9 @@
   ansible.builtin.get_url:
     url: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xa236c58f409091a18aca53cbebff6b99d9b78493
     dest: /etc/apt/trusted.gpg.d/sonarr.asc
+    owner: root
+    group: root
+    mode: 0750
 
 - name: Install sonarr repo
   ansible.builtin.apt_repository: