diff --git a/tasks/input.yml b/tasks/input.yml
index 5638aca..91bd7c4 100644
--- a/tasks/input.yml
+++ b/tasks/input.yml
@@ -60,3 +60,4 @@
     path: /etc/modprobe.d/hid_apple.conf
     line: options hid_apple fnmode=2
     create: true
+    mode: 0644
diff --git a/tasks/intersect.yml b/tasks/intersect.yml
index 9b2bc97..59d7a3d 100644
--- a/tasks/intersect.yml
+++ b/tasks/intersect.yml
@@ -20,3 +20,4 @@
     path: "{{ home }}/.dotfiles"
     owner: "{{ user }}"
     group: users
+    mode: 0700
diff --git a/tasks/packages.yml b/tasks/packages.yml
index e0dc19f..7dc75c9 100644
--- a/tasks/packages.yml
+++ b/tasks/packages.yml
@@ -17,6 +17,7 @@
     line: "aur_builder ALL=(ALL) NOPASSWD: /usr/bin/pacman"
     create: true
     validate: visudo -cf %s
+    mode: 0644
 
 - name: Install yay
   aur:
diff --git a/tasks/python.yml b/tasks/python.yml
index 9b60871..6a4cd07 100644
--- a/tasks/python.yml
+++ b/tasks/python.yml
@@ -16,3 +16,4 @@
     path: /opt/pyenv
     owner: "{{ user }}"
     group: users
+    mode: 0644
diff --git a/tasks/shell.yml b/tasks/shell.yml
index cc42d7b..214e5df 100644
--- a/tasks/shell.yml
+++ b/tasks/shell.yml
@@ -133,3 +133,4 @@
     state: present
     line: KEYMAP=uk
     create: true
+    mode: 0644