diff --git a/tasks/main.yml b/tasks/main.yml
index ba642748576936de1518a2ffd03ea09cd366bee0..728f8db12ee9ae9dd1682c43d9d61ffbc0e26fee 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -353,7 +353,7 @@
     dest: "/home/docker/odoo/odoo/id_ed25519.sources"
     owner: root
     group: root
-    mode: '0600'
+    mode: '0400'
   when: odoo_nonprod_instances is not defined and odoo_prod is defined
   notify:
     - build odoo docker prod
@@ -378,7 +378,7 @@
     dest: "/home/docker/odoo/odoo/id_rsa"
     owner: root
     group: root
-    mode: '0600'
+    mode: '0400'
   when: git_private_keys is defined and odoo_nonprod_instances is not defined and odoo_prod is defined
   notify: build odoo docker prod
   tags: odoo_prod
@@ -577,7 +577,7 @@
     dest: "/root/.ssh/id_rsa"
     owner: root
     group: root
-    mode: '0600'
+    mode: '0400'
   when: private_keys is defined and odoo_prod is defined
   tags: odoo_prod