diff --git a/scripts/install b/scripts/install
index ba07e11..c91b147 100755
--- a/scripts/install
+++ b/scripts/install
@@ -30,6 +30,9 @@ ynh_script_progression "Adding $app's configuration..."
 
 ynh_config_add --template=".env" --destination="$data_dir/config/ocis.env"
 
+chmod 400 "$data_dir/config/ocis.env"
+chown $app:$app "$data_dir/config/ocis.env"
+
 #=================================================
 # INSTALL OWNCLOUD
 #=================================================
@@ -39,6 +42,7 @@ pushd "$install_dir"
 	./ocis init --insecure=true --force-overwrite=true --admin-password=$password --config-path=$data_dir/config/
 popd
 
+chmod 400 "$data_dir/config/ocis.yaml"
 chown $app:$app "$data_dir/config/ocis.yaml"
 
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index 6b95c09..456ba44 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -46,6 +46,9 @@ ynh_script_progression "Adding $app's configuration..."
 
 ynh_config_add --template=".env" --destination="$install_dir/ocis.env"
 
+chmod 400 "$data_dir/config/ocis.env"
+chown $app:$app "$data_dir/config/ocis.env"
+
 #=================================================
 # START SYSTEMD SERVICE
 #=================================================