diff --git a/roles/fail2ban/application/tasks/main.yml b/roles/fail2ban/application/tasks/main.yml
index b4b1cfd..c473098 100644
--- a/roles/fail2ban/application/tasks/main.yml
+++ b/roles/fail2ban/application/tasks/main.yml
@@ -24,4 +24,7 @@
   template:
     src: sshd.jail.conf
     dest: "{{ jails_directory }}/sshd.local"
+    owner: root
+    group: root
+    mode: u=rw,g=r,o=r
   notify: reload fail2ban