diff --git a/manifests/app.pp b/manifests/app.pp
index b8b91d5..8cf0d3a 100644
--- a/manifests/app.pp
+++ b/manifests/app.pp
@@ -43,7 +43,7 @@
     ensure  => $ensure,
     owner   => $uid,
     group   => $gid,
-    mode    => '0644',
+    mode    => '0640',
     content => template($template),
     notify  => Service['uwsgi'],
   }
diff --git a/spec/defines/app_spec.rb b/spec/defines/app_spec.rb
index 0ac5327..7ba4c03 100644
--- a/spec/defines/app_spec.rb
+++ b/spec/defines/app_spec.rb
@@ -29,7 +29,7 @@
                   'ensure' => 'present',
                   'owner' => 'test',
                   'group' => 'test',
-                  'mode' => '0644'
+                  'mode' => '0640'
                 )
             end
           else
@@ -39,7 +39,7 @@
                   'ensure' => 'present',
                   'owner' => 'test',
                   'group' => 'test',
-                  'mode' => '0644'
+                  'mode' => '0640'
                 )
             end
           end
@@ -50,7 +50,7 @@
                 'ensure' => 'present',
                 'owner' => 'test',
                 'group' => 'test',
-                'mode' => '0644'
+                'mode' => '0640'
               )
           end
         end