diff --git a/postgres/tasks/main.yml b/postgres/tasks/main.yml
index f9be6147920e2ecbb8672bb63fa263c2e1817af0..f9a0d4d3805f834ec08979850fe9339c1731a8b4 100644
--- a/postgres/tasks/main.yml
+++ b/postgres/tasks/main.yml
@@ -42,7 +42,7 @@
     - config
 
 - name: ensure rsnapshot is running regularly
-  copy: src=crontab dest=/var/spool/cron/crontabs/root owner=root group=root mode=0644
+  copy: src=crontab dest=/var/spool/cron/crontabs/root owner=root group=root mode=0600
   tags:
     - postgres
     - rsnapshot