diff --git a/roles/debian-base/tasks/ssh.yml b/roles/debian-base/tasks/ssh.yml
index 1ff39a2..2179974 100644
--- a/roles/debian-base/tasks/ssh.yml
+++ b/roles/debian-base/tasks/ssh.yml
@@ -13,9 +13,9 @@
       ListenAddress 0.0.0.0
       SyslogFacility AUTH
       permitRootLogin yes
-  owner: root
-  group: root
-  mode: '0644'
+    owner: root
+    group: root
+    mode: '0644'
 - name: Delete old host SSH keys
   file:
     path: "{{ item }}"