diff --git a/deploy.sh b/deploy.sh
index feb6cd5..44ab6b9 100644
--- a/deploy.sh
+++ b/deploy.sh
@@ -71,6 +71,9 @@ setup_ssh() {
   echo -e "\n\n  ✅ Generating new SSH for numbus-admin..."
   mkdir -p extra-files/home/numbus-admin/.ssh/
   ssh-keygen -t "ed25519" -C "numbus-admin@numbus-server" -f "extra-files/home/numbus-admin/.ssh/id_ed25519" -N "" -q
+  chmod 700 extra-files/home/numbus-admin/.ssh/
+  chmod 600 extra-files/home/numbus-admin/.ssh/id_ed25519
+  chmod 644 extra-files/home/numbus-admin/.ssh/id_ed25519.pub
 
   REMOTE_PASS=$(gum input --password --placeholder "Enter password for 'nixos' on '$TARGET_HOST'")
   if [ -z "$REMOTE_PASS" ]; then