diff --git a/nixosModules/wakapi.nix b/nixosModules/wakapi.nix
index a05d6de..a704dd9 100644
--- a/nixosModules/wakapi.nix
+++ b/nixosModules/wakapi.nix
@@ -37,7 +37,7 @@
     };
 
     systemd.tmpfiles.rules = [
-      "C /home/wakapi/config.yml 0777 root root 0 ${toString ./wakapi.yml}"
+      "C /home/wakapi/config.yml 0400 wakapi wakapi 0 ${toString ./wakapi.yml}"
     ];
 
     systemd.services.wakapi = {