diff --git a/wp-cli-docker/roles/wordpress-init/tasks/main.yml b/wp-cli-docker/roles/wordpress-init/tasks/main.yml
index 2990b601793a849a62b52ead076df75acc251af1..774a6398920647f082365f962ed7ea12a862861e 100644
--- a/wp-cli-docker/roles/wordpress-init/tasks/main.yml
+++ b/wp-cli-docker/roles/wordpress-init/tasks/main.yml
@@ -43,6 +43,7 @@
     path: "{{ wordpress_homedir }}/wp-config.php"
     owner: "{{ wp_user }}"
     group: "{{ wp_group }}"
+    mode: 0640
   ignore_errors: true
   when: config.stat.exists