diff --git a/tasks/package.yml b/tasks/package.yml
index 47080c0..8b43288 100644
--- a/tasks/package.yml
+++ b/tasks/package.yml
@@ -50,7 +50,7 @@
   template:
     src: pretalx.cfg.j2
     dest: "{{ pretalx_system_home }}/.pretalx.cfg"
-    mode: "0644"
+    mode: "0600"
   notify:
     - Restart pretalx service
     - Restart worker service