diff --git a/tasks/main.yml b/tasks/main.yml
index efe6e33..9d3f296 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -75,7 +75,7 @@
 
 
     - name: Generate WireGuard private and public keys
-      shell: wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey | chmod 600 /etc/wireguard/privatekey
+      shell: umask 077 && wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey
 
 
     - name: Register WireGuard private key as a variable