diff --git a/playbooks/roles/mariadb/tasks/main.yaml b/playbooks/roles/mariadb/tasks/main.yaml
index 142be28de3..80d8b075cd 100644
--- a/playbooks/roles/mariadb/tasks/main.yaml
+++ b/playbooks/roles/mariadb/tasks/main.yaml
@@ -8,7 +8,7 @@
   template:
     src: docker-compose.yaml.j2
     dest: /etc/mariadb-compose/docker-compose.yaml
-    mode: 0644
+    mode: 0600
 
 - name: Ensure database volume exists
   file: