diff --git a/generate_config.sh b/generate_config.sh
index e50716a..26b3c29 100755
--- a/generate_config.sh
+++ b/generate_config.sh
@@ -13,6 +13,7 @@ usage() {
 
 loadSecrets() {
     SECRETS_FOUND=1
+    chmod 600 secrets.env
     set -a && source secrets.env && set +a
 }