diff --git a/fdroidserver/build.py b/fdroidserver/build.py
index b969cff4..e260d585 100644
--- a/fdroidserver/build.py
+++ b/fdroidserver/build.py
@@ -218,6 +218,7 @@ def build_server(app, thisbuild, vcs, build_dir, output_dir, force):
         ftp.put(os.path.join(serverpath, 'build.py'), 'build.py')
         ftp.put(os.path.join(serverpath, 'common.py'), 'common.py')
         ftp.put(os.path.join(serverpath, '..', 'config.buildserver.py'), 'config.py')
+        ftp.chmod('config.py', 0o600)
 
         # Copy the metadata - just the file for this app...
         ftp.mkdir('metadata')