diff --git a/scripts/upgrade b/scripts/upgrade
index f2933c51..70a5c09b 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -163,6 +163,9 @@ fi
 chmod 750 "$final_path"
 chmod -R o-rwx "$final_path"
 chown -R $app:www-data "$final_path"
+# Pixelfed app should be able to edit its settings from the admin panel
+chmod 600 "$final_path"/.env
+
 
 #=================================================
 # NGINX CONFIGURATION