diff --git a/tasks/main.yml b/tasks/main.yml
index 9c39649..d967872 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -43,6 +43,7 @@
       copy:
         src: "/home/{{ i3wm_user }}/.config/i3/config"
         dest: "/home/{{ i3wm_user }}/.config/i3/config.bakup"
+        mode: 0600
         remote_src: true
       when: config_file.stat.exists
 
@@ -50,6 +51,7 @@
       template:
         src: config.j2
         dest: "/home/{{ i3wm_user }}/.config/i3/config"
+        mode: 0644
 
     - name: check i3 config file
       command: "i3 -C -c /home/{{ i3wm_user }}/.config/i3/config"
@@ -66,12 +68,14 @@
         src: ~/.config/i3/config.bak
         dest: ~/.config/i3/config
         remote_src: true
+        mode: 0644
       when: config_file_backup.stat.exists
 
 - name: copy files
   copy:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
+    mode: 0644
   with_items:
     - { src: 'files/background.png', dest: "/home/{{ i3wm_user }}/.config/background.png" }
     - { src: 'files/lockscreen.png', dest: '/home/{{ i3wm_user }}/.config/lockscreen.png' }
diff --git a/vars/main.yml b/vars/main.yml
index 34a865f..2bb2882 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -33,5 +33,5 @@ __i3_workspaces:
 
 user: "{{ i3wm_user }}"
 
-playbook_version_number: 9013 # should be over ninethousand
+playbook_version_number: 9014 # should be over ninethousand
 playbook_version_path: 'role-i3wm_chaos-bodensee_github.com.version'