diff --git a/tasks/main.yml b/tasks/main.yml
index 050774a..9f5c18b 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -14,10 +14,13 @@
   when: arpwatch__enabled|bool
 
 # Manage configuration file [[[1
-- name: Configure Arpwatch
+- name: Create Arpwatch configuration
   template:
     src: '{{ arpwatch__conf_src }}'
     dest: "/etc/arpwatch.conf"
+    owner: root
+    group: root
+    mode: '0644'
   when: arpwatch__enabled|bool
   notify: ['restart arpwatch service']
 
diff --git a/templates/etc/arpwatch.conf.j2 b/templates/etc/arpwatch.conf.j2
index 07bdbcf..740a0e0 100644
--- a/templates/etc/arpwatch.conf.j2
+++ b/templates/etc/arpwatch.conf.j2
@@ -1,3 +1,5 @@
+## {{ ansible_managed }}
+
 # /etc/arpwatch.conf: Debian-specific way to watch multiple interfaces.
 # Format of this configuration file is:
 #