diff --git a/flake.nix b/flake.nix
index 9c06b65..5f8370b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -138,6 +138,7 @@
                     WorkingDirectory = site;
                     ExecStart = "${site}/bin/printerfacts";
                     RestartSec = "5s";
+                    UMask = "007";
                   };
 
                 environment = {