diff --git a/nixos/modules/burrow-zulip.nix b/nixos/modules/burrow-zulip.nix
index 23ce77b..7d93705 100644
--- a/nixos/modules/burrow-zulip.nix
+++ b/nixos/modules/burrow-zulip.nix
@@ -204,6 +204,7 @@ END
 \$\$;
 ALTER ROLE zulip WITH LOGIN PASSWORD '$db_password_sql';
 SQL
+        chmod 0644 "$setup_sql"
 
         ${pkgs.util-linux}/bin/runuser -u postgres -- psql -v ON_ERROR_STOP=1 -f "$setup_sql"
       '';