diff --git a/roles/forgejo/tasks/start.yml b/roles/forgejo/tasks/start.yml
index 44dfa65..1f58536 100644
--- a/roles/forgejo/tasks/start.yml
+++ b/roles/forgejo/tasks/start.yml
@@ -19,7 +19,7 @@
     dest: "{{ forgejo_conf_dir }}/app.ini"
     owner: git
     group: git
-    mode: 0640
+    mode: 0600
   notify:
     - Restart forgejo service