diff --git a/defaults/main.yaml b/defaults/main.yaml
index f1289ea..65baa9a 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -28,7 +28,7 @@ zuul_registry_user_home_mode: 0755
 
 zuul_registry_file_registry_yaml_dest: /etc/zuul-registry/registry.yaml
 zuul_registry_file_registry_yaml_group: "{{ zuul_registry_user_group }}"
-zuul_registry_file_registry_yaml_mode: 0644
+zuul_registry_file_registry_yaml_mode: 0640
 zuul_registry_file_registry_yaml_owner: "{{ zuul_registry_user_name }}"
 zuul_registry_file_registry_yaml_src: etc/zuul-registry/registry.yaml