diff --git a/roles/garage/tasks/main.yml b/roles/garage/tasks/main.yml
index 52f9a2f..3ff6494 100644
--- a/roles/garage/tasks/main.yml
+++ b/roles/garage/tasks/main.yml
@@ -21,7 +21,7 @@
   ansible.builtin.template:
     src: garage.toml.j2
     dest: /etc/garage.toml
-    mode: 0644
+    mode: 0640
   vars:
     cluster_group: "{{ group_names | map('regex_search', '.+_cluster') | select('string') | first }}"
     cluster_group_length: "{{ groups[cluster_group] | reject('search', 'gw') | length }}"