diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 19d2236c1646463b3712534ad12b931a6b3c52bf..c23cb2ce5715ccbb57c53b2359e264a6cda81107 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -32,6 +32,7 @@ deploy_testing:
     - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini
     - mkdir .db
     - envsubst < src/gms/settings_local.example.py > src/gms/settings_local.py
+    - chmod 600 src/gms/settings_local.py
     - ln -srT ./ /var/www/test/$CI_COMMIT_REF_NAME
     - python src/manage.py collectstatic
     - python src/manage.py makemigrations
@@ -57,6 +58,7 @@ deploy_staging:
     - rm -f /etc/uwsgi/vassals/stage.ini
     - ln -srT ./ /services/$CI_PROJECT_NAME
     - envsubst < src/gms/settings_local.example.py > src/gms/settings_local.py
+    - chmod 600 src/gms/settings_local.py
     - python src/manage.py collectstatic
     - python src/manage.py makemigrations
     - python src/manage.py migrate --run-syncdb
@@ -79,4 +81,4 @@ stop_testing:
     - master
   script:
     - rm -f /var/www/test/$CI_COMMIT_REF_NAME
-    - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini
\ No newline at end of file
+    - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini