diff --git a/scripts/install b/scripts/install
index d6afdad..f98125a 100755
--- a/scripts/install
+++ b/scripts/install
@@ -134,6 +134,9 @@ chmod 750 "$data_path"
 chmod -R o-rwx "$data_path"
 chown -R $app: "$data_path"
 
+chmod 400 "$data_path/config.xml"
+chown $app:$app "$data_path/config.xml"
+
 #=================================================
 # YUNOHOST MULTIMEDIA INTEGRATION
 #=================================================
diff --git a/scripts/restore b/scripts/restore
index a1729f5..4ae52d8 100755
--- a/scripts/restore
+++ b/scripts/restore
@@ -83,6 +83,9 @@ chmod 750 "$data_path"
 chmod -R o-rwx "$data_path"
 chown -R $app: "$data_path"
 
+chmod 400 "$data_path/config.xml"
+chown $app:$app "$data_path/config.xml"
+
 #=================================================
 # YUNOHOST MULTIMEDIA INTEGRATION
 #=================================================
diff --git a/scripts/upgrade b/scripts/upgrade
index 8e93e0c..0f99ae4 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -139,6 +139,9 @@ ynh_script_progression --message="Updating the configuration file.." --weight=1
 
 ynh_add_config --template="../conf/config.xml" --destination="$data_path/config.xml"
 
+chmod 400 "$data_path/config.xml"
+chown $app:$app "$data_path/config.xml"
+
 #=================================================
 # GENERIC FINALIZATION
 #=================================================