diff --git a/roles/postgres/tasks/main.yml b/roles/postgres/tasks/main.yml
index fe47185..3228d32 100644
--- a/roles/postgres/tasks/main.yml
+++ b/roles/postgres/tasks/main.yml
@@ -11,7 +11,7 @@
     owner: postgres
     group: postgres
     state: directory
-    mode: 0755
+    mode: 0700
 
 - name: Populate postgresql directory
   ansible.builtin.command:
@@ -32,7 +32,7 @@
   ansible.builtin.copy:
     src: files/pg_hba.conf
     dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
-    mode: 0644
+    mode: 0640
   notify: Restart postgres
 
 - name: Create backup dir