--- a/rpi-base/tasks/main.yml	Sun Feb 09 20:56:26 2020 -0600
+++ b/rpi-base/tasks/main.yml	Mon Feb 10 07:49:58 2020 -0600
@@ -23,7 +23,7 @@
 
 - name: setup wifi
   become: yes
-  template: src="wpa_supplicant.conf.j2" dest="/etc/wpa_supplicant/wpa_supplicant.conf" mode="0644"
+  template: src="wpa_supplicant.conf.j2" dest="/etc/wpa_supplicant/wpa_supplicant.conf" mode="0600"
 
 - name: update apt package cache
   become: yes