diff --git a/tasks/sentinel.yml b/tasks/sentinel.yml
index 03478426..88a7fc94 100644
--- a/tasks/sentinel.yml
+++ b/tasks/sentinel.yml
@@ -97,6 +97,7 @@
     src: redis_sentinel.conf.j2
     dest: /etc/redis/sentinel_{{ redis_sentinel_port }}.conf
     owner: "{{ redis_user }}"
+    group: "{{ redis_group }}"
     mode: 0640
   notify: restart sentinel
 
@@ -104,6 +105,7 @@
   template:
     dest: /etc/sysconfig/sentinel_{{ redis_sentinel_port }}
     src: redis.init.conf.j2
+    mode: 0600
   when: ansible_os_family == "RedHat"
   notify: restart sentinel
 
@@ -111,6 +113,7 @@
   template:
     dest: /etc/default/sentinel_{{ redis_sentinel_port }}
     src: redis.init.conf.j2
+    mode: 0600
   when: ansible_os_family == "Debian"
   notify: restart sentinel
 
diff --git a/tasks/server.yml b/tasks/server.yml
index a01ff799..a7762454 100644
--- a/tasks/server.yml
+++ b/tasks/server.yml
@@ -97,6 +97,7 @@
     src: redis.conf.j2
     dest: /etc/redis/{{ redis_port }}.conf
     owner: "{{ redis_user }}"
+    group: "{{ redis_group }}"
     mode: 0640
   notify: restart redis