diff --git a/roles/custom/matrix-bot-buscarron/tasks/setup_install.yml b/roles/custom/matrix-bot-buscarron/tasks/setup_install.yml
index 2c478e459..0559efec1 100644
--- a/roles/custom/matrix-bot-buscarron/tasks/setup_install.yml
+++ b/roles/custom/matrix-bot-buscarron/tasks/setup_install.yml
@@ -41,7 +41,7 @@
   when: "item.when | bool"
 
 - name: Determine basicauth filename
-  set_fact:
+  ansible.builtin.set_fact:
     matrix_bot_buscarron_basicauth_file_tmp: "{{ matrix_bot_buscarron_basicauth_file }}_{{ inventory_hostname }}"
   when: matrix_bot_buscarron_basicauth_enabled | bool
 
@@ -50,6 +50,7 @@
     path: "{{ matrix_bot_buscarron_basicauth_file }}"
     name: "{{ matrix_bot_buscarron_basicauth_user }}"
     password: "{{ matrix_bot_buscarron_basicauth_password }}"
+    mode: 0640
   become: false
   delegate_to: 127.0.0.1
   when: matrix_bot_buscarron_basicauth_enabled | bool
diff --git a/roles/custom/matrix-bot-honoroit/tasks/setup_install.yml b/roles/custom/matrix-bot-honoroit/tasks/setup_install.yml
index 5336e85dc..12d3ff1fd 100644
--- a/roles/custom/matrix-bot-honoroit/tasks/setup_install.yml
+++ b/roles/custom/matrix-bot-honoroit/tasks/setup_install.yml
@@ -41,7 +41,7 @@
   when: "item.when | bool"
 
 - name: Determine basicauth filename
-  set_fact:
+  ansible.builtin.set_fact:
     matrix_bot_honoroit_basicauth_file_tmp: "{{ matrix_bot_honoroit_basicauth_file }}_{{ inventory_hostname }}"
   when: matrix_bot_honoroit_basicauth_enabled | bool
 
@@ -50,6 +50,7 @@
     path: "{{ matrix_bot_honoroit_basicauth_file }}"
     name: "{{ matrix_bot_honoroit_basicauth_user }}"
     password: "{{ matrix_bot_honoroit_basicauth_password }}"
+    mode: 0640
   become: false
   delegate_to: 127.0.0.1
   when: matrix_bot_honoroit_basicauth_enabled | bool