diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000000000000000000000000000000000000..0f236f11f5cc2185d0be93cd567a8bc4c2d1bcb2
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,3 @@
+{
+  "ansible.python.interpreterPath": "/usr/bin/python3"
+}
\ No newline at end of file
diff --git a/tasks/ubuntu/main.yml b/tasks/ubuntu/main.yml
index 57bdec4087ca15cc8d092a840864b0eaa166b2af..a3e5a7fa0d41bedd0084ddbf032a510145298973 100644
--- a/tasks/ubuntu/main.yml
+++ b/tasks/ubuntu/main.yml
@@ -46,7 +46,7 @@
     state: directory
     owner: root
     group: root
-    mode: '0755'
+    mode: '0750'
 
 - name: Override gitlab config
   ansible.builtin.copy:
@@ -55,7 +55,7 @@
     dest: "/etc/gitlab/gitlab.rb"
     owner: root
     group: root
-    mode: '0644'
+    mode: '0640'
     backup: yes
   register: gitlab_config
   notify: Reconfigure gitlab
@@ -80,5 +80,5 @@
     dest: "/etc/cron.d/gitlab-backup"
     owner: root
     group: root
-    mode: '0644'
+    mode: '0640'
   when: gitlab_backup_cron is defined