diff --git a/README.md b/README.md
index ca3ad56..a5357ef 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in
 ## Overview
 CryptPad is a collaborative encrypted document editor in real time. It is a privacy-friendly alternative to popular office tools and cloud services. All content stored in CryptPad is encrypted before being sent, which means that no one can access your data unless you give them the keys. You can share access to a document simply by sharing the link.
 
-**Shipped version:** 4.2.1
+**Shipped version:** 4.3.0
 
 ## Screenshots
 
diff --git a/README_fr.md b/README_fr.md
index 80f776c..45050d1 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -11,7 +11,7 @@ Si vous n'avez pas YunoHost, consultez [le guide](https://yunohost.org/#/install
 ## Vue d'ensemble
 CryptPad est un éditeur de documents chiffrés collaboratifs en temps réel. C'est une alternative respectant la vie privée aux outils office et aux services cloud populaires. Tout le contenu stocké dans CryptPad est chiffré avant d'être envoyé, ce qui signifie que personne ne peut accéder à vos données à moins que vous ne leur donniez les clés. Vous pouvez partager l'accès à un document simplement en partageant le lien.
 
-**Version incluse :** 4.2.1
+**Version incluse :** 4.3.0
 
 ## Captures d'écran
 
diff --git a/conf/app.src b/conf/app.src
index 70bdf29..0beb845 100644
--- a/conf/app.src
+++ b/conf/app.src
@@ -1,6 +1,6 @@
-SOURCE_URL=https://github.com/xwiki-labs/cryptpad/archive/4.2.1.tar.gz
-SOURCE_SUM=0e769b0184741907bf5cdd0f5bb0488d43589435f2f102e53d7d64e666978a65
+SOURCE_URL=https://github.com/xwiki-labs/cryptpad/archive/4.3.0.tar.gz
+SOURCE_SUM=aefa5853981b11853aad60439071fa9e3b5e5fd0642cb48adf7cd1e8133dc8f5
 SOURCE_SUM_PRG=sha256sum
 SOURCE_FORMAT=tar.gz
 SOURCE_IN_SUBDIR=true
-SOURCE_FILENAME=cryptpad-4.2.1.tar.gz
+SOURCE_FILENAME=cryptpad-4.3.0.tar.gz
diff --git a/manifest.json b/manifest.json
index 153b77e..ec3e855 100644
--- a/manifest.json
+++ b/manifest.json
@@ -6,7 +6,7 @@
         "en": "Zero Knowledge realtime collaborative editor",
         "fr": "Éditeur chiffré collaboratif en temps réel."
     },
-    "version": "4.2.1~ynh3",
+    "version": "4.3.0~ynh1",
     "url": "https://cryptpad.fr/",
     "license": "AGPL-3.0-only",
     "maintainer": {
diff --git a/scripts/install b/scripts/install
index a2401f4..9d03ad0 100644
--- a/scripts/install
+++ b/scripts/install
@@ -103,8 +103,8 @@ ynh_add_nginx_config
 #=================================================
 ynh_script_progression --message="Configuring a systemd service..." --weight=1
 
-ynh_replace_string --match_string="__ENV_PATH__" --replace_string="$PATH"    --target_file="../conf/systemd.service"
-ynh_replace_string --match_string="__YNH_NPM__"  --replace_string="$ynh_npm" --target_file="../conf/systemd.service"
+ynh_replace_string --match_string="__ENV_PATH__" --replace_string="$PATH" --target_file="../conf/systemd.service"
+ynh_replace_string --match_string="__YNH_NPM__" --replace_string="$ynh_npm" --target_file="../conf/systemd.service"
 
 ynh_add_systemd_config
 
@@ -132,6 +132,7 @@ popd || ynh_die
 ynh_script_progression --message="Securing files and directories..." --weight=1
 
 chown -R $app:$app $final_path
+chmod -R o-rwx $final_path
 chmod 600 "$final_path/config/config.js"
 
 #=================================================
diff --git a/scripts/restore b/scripts/restore
index 374e5eb..1b1ae01 100644
--- a/scripts/restore
+++ b/scripts/restore
@@ -70,6 +70,7 @@ ynh_restore_file --origin_path="$final_path"
 
 # Restore permissions on app files
 chown -R $app: $final_path
+chmod -R o-rwx $final_path
 chmod 600 "$final_path/config/config.js"
 
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index ab8d77a..63904b4 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -127,8 +127,8 @@ popd || ynh_die
 #=================================================
 ynh_script_progression --message="Upgrading systemd configuration..." --weight=1
 
-ynh_replace_string --match_string="__ENV_PATH__"  --replace_string="$PATH"    --target_file="../conf/systemd.service"
-ynh_replace_string --match_string="__YNH_NPM__"   --replace_string="$ynh_npm" --target_file="../conf/systemd.service"
+ynh_replace_string --match_string="__ENV_PATH__" --replace_string="$PATH" --target_file="../conf/systemd.service"
+ynh_replace_string --match_string="__YNH_NPM__" --replace_string="$ynh_npm" --target_file="../conf/systemd.service"
 
 # Create a dedicated systemd config
 ynh_add_systemd_config
@@ -140,6 +140,7 @@ ynh_script_progression --message="Upgrading systemd configuration..." --weight=1
 
 # Set permissions on app files
 chown -R $app: $final_path
+chmod -R o-rwx $final_path
 chmod 600 "$final_path/config/config.js"
 
 #=================================================