diff --git a/alpine/alpine-secure.sh b/alpine/alpine-secure.sh
index 2918f58..79a5545 100644
--- a/alpine/alpine-secure.sh
+++ b/alpine/alpine-secure.sh
@@ -27,6 +27,8 @@ PublicKey = $WIREGUARD_PUBKEY
 AllowedIPs = $WG_SUBNET::2/128
 EOF
 
+chmod 600 /etc/wireguard/vmh-ssh-vpn.conf
+
 ln -s /etc/init.d/wg-quick /etc/init.d/wg-quick.vmh-ssh-vpn
 rc-update add wg-quick.vmh-ssh-vpn default
 rc-service wg-quick.vmh-ssh-vpn start