diff --git a/tasks/main.yml b/tasks/main.yml
index 0636a18..15fd741 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -20,6 +20,7 @@
     community.crypto.openssh_keypair:
       path: /root/.ssh/id_ed25519
       type: ed25519
+      mode: "0600"
       comment: "root@{{ inventory_hostname }}"
       force: "{{ force_ssh_key_regen | default(false) }}"