diff --git a/roles/keycloak/tasks/main.yml b/roles/keycloak/tasks/main.yml
index dc86ea12ac01968fd135684ea119d89ce00587b9..e8c692bbc79270920347e6019ae010f4c5c116db 100644
--- a/roles/keycloak/tasks/main.yml
+++ b/roles/keycloak/tasks/main.yml
@@ -14,7 +14,7 @@
     - restart keycloak
 
 - name: copy custom theme
-  copy: src=theme/archlinux dest=/opt/keycloak/themes
+  copy: src=theme/archlinux dest=/opt/keycloak/themes owner=keycloak group=keycloak mode=600
   notify:
     - restart keycloak