diff --git a/.github/workflows/ansible-lint.yml b/.github/workflows/ansible-lint.yml
index 3d6dce1e..2bc0a931 100644
--- a/.github/workflows/ansible-lint.yml
+++ b/.github/workflows/ansible-lint.yml
@@ -23,7 +23,7 @@ jobs:
         # targets: |
         #   playbook_1.yml
         #   playbook_2.yml
-        targets: "*.yml group_vars/*.yml "
+        targets: "*.yml inventory/group_vars/*.yml"
         # [optional]
         # Arguments to override a package and its version to be set explicitly.
         # Must follow the example syntax.
diff --git a/stratum0-deploy-cvmfs-config.yml b/stratum0-deploy-cvmfs-config.yml
index fd59aa62..ba718191 100644
--- a/stratum0-deploy-cvmfs-config.yml
+++ b/stratum0-deploy-cvmfs-config.yml
@@ -12,6 +12,7 @@
 
         - name: create directories
           file:
+            mode: "755"
             path: "{{ item }}"
             state: directory
           with_list:
@@ -21,12 +22,14 @@
 
         - name: deploy public keys
           copy: content="{{ item.key }}" dest="/cvmfs/{{ eessi_cvmfs_config_repo.repository.repository }}{{ item.path }}"
+          mode: "755"
           with_items: "{{ eessi_cvmfs_keys }}"
 
         - name: create contacts file
           copy:
             content: "{{ eessi_email }}\n"
             dest: "/cvmfs/{{ eessi_cvmfs_config_repo.repository.repository }}/etc/cvmfs/contact/{{ eessi_cvmfs_config_repo.domain }}"
+            mode: "755"
 
         - name: create domain configuration file
           copy:
@@ -35,6 +38,7 @@
               CVMFS_KEYS_DIR="/cvmfs/{{ eessi_cvmfs_config_repo.repository.repository }}/etc/cvmfs/keys/{{ eessi_cvmfs_config_repo.domain }}"
               CVMFS_USE_GEOAPI="{{ eessi_cvmfs_server_urls[0].use_geoapi | default(false) | ternary('yes', 'no') }}"
             dest: "/cvmfs/{{ eessi_cvmfs_config_repo.repository.repository }}/etc/cvmfs/domain.d/{{ eessi_cvmfs_config_repo.domain }}.conf"
+            mode: "755"
 
         - name: create default CVMFS configuration file
           copy:
@@ -42,6 +46,7 @@
               # For reference see https://sft.its.cern.ch/jira/browse/CVM-878
               CVMFS_LOW_SPEED_LIMIT=10000
             dest: "/cvmfs/{{ eessi_cvmfs_config_repo.repository.repository }}/etc/cvmfs/default.conf"
+            mode: "755"
 
         - name: publish CVMFS transaction
           command: cvmfs_server publish "{{ eessi_cvmfs_config_repo.repository.repository }}"