diff --git a/roles/lokole/tasks/install.yml b/roles/lokole/tasks/install.yml
index 475105f0d..5742486c1 100644
--- a/roles/lokole/tasks/install.yml
+++ b/roles/lokole/tasks/install.yml
@@ -85,7 +85,7 @@
     path: "{{ lokole_run_directory }}"
     group: "{{ lokole_user }}"
     owner: "{{ lokole_user }}"
-    mode: u+rw
+    mode: g+rw
 
 - name: mkdir /{{ lokole_user }}/log
   file:
@@ -93,12 +93,15 @@
     path: "{{ lokole_log_directory }}"
     group: "{{ lokole_user }}"
     owner: "{{ lokole_user }}"
-    mode: u+rw
+    mode: g+rw
 
 - name: Install {{ lokole_run_directory }}/settings.env
   template:
     src: settings.env.j2
     dest: "{{ lokole_run_directory }}/settings.env"
+    group: "{{ lokole_user }}"
+    owner: "{{ lokole_user }}"
+    mode: a+rw
 
 - name: Install {{ lokole_run_directory }}/webapp_secrets.sh from template, to configure Lokole
   template:
@@ -110,10 +113,9 @@
   template:
     src: webapp.sh.j2
     dest: "{{ lokole_run_directory }}/webapp.sh"
-    mode: a+x
     group: "{{ lokole_user }}"
     owner: "{{ lokole_user }}"
-    mode: u+rw
+    mode: a+x
 
 - name: Create Lokole admin user with password, for http://box{{ lokole_url }}    # http://box/lokole
   shell: |