diff --git a/configs/default.nix b/configs/default.nix
index f2576f1..b59f3be 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -34,7 +34,7 @@ in
           file = ../secrets/di-fm-key.age;
           owner = config.users.users.me.name;
           group = config.users.users.me.group;
-          mode = "400";
+          mode = "440";
         };
         restic = {
           file = ../secrets/restic.age;