diff --git a/tasks/main.yml b/tasks/main.yml
index 8a33e8b85af871efe3d187263c5f58cf7ec7012c..6e8bd7e97d49e9ec33fa04f644a3bb6c69077de3 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,4 +1,5 @@
-- set_fact:
+- name: filter package list
+  set_fact:
     pkgs: "{{ packages.pkg | dict2items | rejectattr('value', 'none') | map(attribute='key') | list }}"
 
 - name: list repositories to setup
@@ -20,13 +21,17 @@
   template:
     src: 50proxy.j2
     dest: /etc/apt/apt.conf.d/50proxy
+    owner: root
+    group: root
+    mode: 0644
   when: apt.proxy is defined
 
 - name: setup repositories
   include_tasks: repo.yml
   with_items: "{{ packages.repos }}"
 
-- meta: flush_handlers
+- name: ensure handlers are flushed
+  meta: flush_handlers
 
 - name: install packages
   apt:
diff --git a/tasks/repo.yml b/tasks/repo.yml
index f6769876ac0ad50cf83808280ec2409502fce1f1..aea9fa50f1e02e890bb51f8e311f861f16cfb835 100644
--- a/tasks/repo.yml
+++ b/tasks/repo.yml
@@ -1,4 +1,5 @@
-- set_fact:
+- name: filter repo list
+  set_fact:
     repo: "{{ packages.repos[item] }}"
 
 - name: "setup repo key for {{ item }}"