diff --git a/scripts/install b/scripts/install
index 34521fc..14e57eb 100644
--- a/scripts/install
+++ b/scripts/install
@@ -48,7 +48,7 @@ ynh_script_progression --message="Adding a configuration file..." --weight=5
 # Install configuration files
 ynh_add_config --template="config.local.php" --destination="$install_dir/config.local.php"
 
-chmod 650 "$install_dir/config.local.php"
+chmod 440 "$install_dir/config.local.php"
 chown $app:$app "$install_dir/config.local.php"
 
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index 25b468e..b8c4678 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -38,7 +38,7 @@ then
 	ynh_script_progression --message="cleaning conf files..." --weight=5
 	mv "$install_dir/config.local.php" "$install_dir/config.local.php.old"
 	mv "$install_dir/config.local.yunohost.php" "$install_dir/config.local.php"
-	chmod 650 "$install_dir/config.local.php"
+	chmod 440 "$install_dir/config.local.php"
 	chown $app:$app "$install_dir/config.local.php"
 	ynh_store_file_checksum --file="$install_dir/config.local.php"
 	ynh_secure_remove "$install_dir/config.local.php.old"
@@ -98,7 +98,7 @@ ynh_script_progression --message="Updating a configuration file..." --weight=5
 # Install configuration files
 ynh_add_config --template="config.local.php" --destination="$install_dir/config.local.php"
 
-chmod 650 "$install_dir/config.local.php"
+chmod 440 "$install_dir/config.local.php"
 chown $app:$app "$install_dir/config.local.php"
 
 ynh_replace_string --match_string="//require '$data_dir/data/config.local.user.php';" --replace_string="require '$data_dir/data/config.local.user.php';" --target_file="$install_dir/config.local.php"
@@ -120,7 +120,7 @@ fi
 if [ ! -f "$data_dir/data/config.local.user.php" ]; then
   ynh_script_progression --message="Adding a configuration file..." --weight=5
   ynh_add_config --template="config.local.user.php" --destination="$data_dir/data/config.local.user.php"
-  chmod 650 "$data_dir/data/config.local.user.php"
+  chmod 440 "$data_dir/data/config.local.user.php"
   chown $app:$app "$data_dir/data/config.local.user.php"
 fi