diff --git a/roles/matomo/tasks/setup.yml b/roles/matomo/tasks/setup.yml
index 8ae2e36..a35c3d0 100644
--- a/roles/matomo/tasks/setup.yml
+++ b/roles/matomo/tasks/setup.yml
@@ -110,11 +110,12 @@
   when: matomo_add_mysql_to_matomo_group and matomo_with_mysql
 
 # required for mysql mysql_secure_file_priv
+# NOTE: if matomo_add_mysql_to_matomo_group group should be always matomo-group
 - name: Secure matomo directory
   ansible.builtin.file:
     path: '{{ matomo_dir }}'
     owner: '{{ matomo_user }}'
-    group: "{{ 'mysql' if matomo_with_mysql else matomo_group }}"
+    group: "{{ 'mysql' if matomo_with_mysql and matomo_add_mysql_to_matomo_group else matomo_group }}"
     mode: '0750'
 
 - name: Install robots.txt