diff --git a/roles/mediaserver/tasks/main.yml b/roles/mediaserver/tasks/main.yml
index f1e451865438dff801ebc14416a6e6b76d0b4ce3..2a2525924b0ebc750649e497ed6ca90701ab254e 100644
--- a/roles/mediaserver/tasks/main.yml
+++ b/roles/mediaserver/tasks/main.yml
@@ -103,6 +103,7 @@
     regexp: '^RTMP_PWD =.*$'
     line: "RTMP_PWD = '{{ server_wowza_live_pwd }}'"
     validate: python3 -m py_compile %s
+    mode: 0644
 
 - name: ensure mediaserver is running
   service: