diff --git a/conf/nginx.conf b/conf/nginx.conf
index c9b69e9..caea0ff 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -2,7 +2,7 @@
 location __PATH__/ {
 
   # Path to source
-  alias __FINALPATH__/webroot ;
+  alias __FINALPATH__/webroot;
 
   if ($scheme = http) {
     rewrite ^ https://$server_name$request_uri? permanent;
@@ -30,6 +30,10 @@ location __PATH__/ {
   include conf.d/yunohost_panel.conf.inc;
 }
 
+location ~ __PATH__/(data|config|lib)/ {
+        deny all;
+    }
+
 location @__APP__ {
   rewrite ^(.*)$ __PATH__/index.php last;
 }
diff --git a/scripts/install b/scripts/install
index ca0c2ba..ab3566d 100755
--- a/scripts/install
+++ b/scripts/install
@@ -103,8 +103,8 @@ ynh_script_progression --message="Configuring Galette..." --weight=1
 
 ynh_add_config --template="../conf/config.inc.php.dist" --destination="$final_path/config/config.inc.php"
 
-chmod 400 "$final_path/config/config.inc.php"
-chown $app "$final_path/config/config.inc.php"
+#chmod 400 "$final_path/config/config.inc.php"
+#chown $app "$final_path/config/config.inc.php"
 
 #=================================================
 # GENERIC FINALIZATION
@@ -114,8 +114,10 @@ chown $app "$final_path/config/config.inc.php"
 
 #for folder in attachments cache exports files imports logs photos templates_c tempimages
 #do
-    chown -R $app "$final_path/data/$folder"
-    chmod -R 775 "$final_path/data/$folder"
+    chown -R $app "$final_path/data"
+    chmod -R 775 "$final_path/data"
+    chown -R $app "$final_path/config"
+    chmod -R 775 "$final_path/config"
 #done
 
 #=================================================