diff --git a/scripts/restore b/scripts/restore
index 4192e0d..e1ec9fc 100644
--- a/scripts/restore
+++ b/scripts/restore
@@ -64,7 +64,8 @@ ynh_restore_file --origin_path="$final_path"
 #=================================================
 
 # Restore permissions on app files
-chown -R $app: $final_path
+chown -R $app:www-data $final_path
+chmod o-rwx $final_path
 
 #=================================================
 # GENERIC FINALIZATION
diff --git a/scripts/upgrade b/scripts/upgrade
index 6cc72ef..72500ca 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -91,7 +91,8 @@ ynh_add_nginx_config
 #=================================================
 
 # Set permissions on app files
-chown -R $app: $final_path
+chown -R $app:www-data $final_path
+chmod o-rwx $final_path
 
 #=================================================
 # RELOAD NGINX