diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 20e1af0..efb7f08 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -18,7 +18,7 @@ jobs:
           cat - <<EOD > ssh-key
           ${{ secrets.DEPLOY_SSH_KEY }}
           EOD
-
+          chmod 400 ssh-key
           export NIX_PATH=nixpkgs=flake:nixpkgs:/nix/var/nix/profiles/per-user/root/channels/nixos
           /run/current-system/sw/bin/nix-shell -p rsync openssh --run \
             'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" result/* deploy@andrew.riouxs.co:/srv/site'