diff --git a/manifests/server/pghba/pg_hba.pp b/manifests/server/pghba/pg_hba.pp
index c9f23f0..4823346 100644
--- a/manifests/server/pghba/pg_hba.pp
+++ b/manifests/server/pghba/pg_hba.pp
@@ -21,7 +21,7 @@ class postgresql_cd::server::pghba::pg_hba (
     concat { $pl_pg_hba_conf:
       ensure => present,
       owner  => 'postgres',
-      mode   => '0640',
+      mode   => '0600',
       notify => Service[$pl_service],
     }