diff --git a/roles/infinote/tasks/main.yml b/roles/infinote/tasks/main.yml
index c923a197ec..76ed0da1f7 100644
--- a/roles/infinote/tasks/main.yml
+++ b/roles/infinote/tasks/main.yml
@@ -21,7 +21,7 @@
   - config
 
 - name: allow infinote user to read ssl certs
-  file: dest=/etc/pki/tls/private/wildcard-2014.fedoraproject.org.key mode=600 owner=infinote group=root
+  file: dest=/etc/pki/tls/private/wildcard-2014.fedoraproject.org.key mode=640 owner=infinote group=apache
   tags:
   - infinote
   - config