diff --git a/install b/install
index f5c93d2c8..a08a61c3c 100755
--- a/install
+++ b/install
@@ -402,6 +402,7 @@ mkdir_and_chown "$LIBRETIME_USER" "$LOG_DIR"
 if $is_first_install; then
   [[ -f "$CONFIG_TMP_FILEPATH" ]] || cp "$CONFIG_EXAMPLE_FILEPATH" "$CONFIG_TMP_FILEPATH"
   chown "$LIBRETIME_USER:$LIBRETIME_USER" "$CONFIG_TMP_FILEPATH"
+  chmod 640 "$CONFIG_TMP_FILEPATH"
 
   if [[ -n "$LIBRETIME_PUBLIC_URL" ]]; then
     set_config "$LIBRETIME_PUBLIC_URL" general public_url