diff --git a/shared/applications/state/postgresql.nix b/shared/applications/state/postgresql.nix
index 3c1e371..f84c47f 100644
--- a/shared/applications/state/postgresql.nix
+++ b/shared/applications/state/postgresql.nix
@@ -14,7 +14,7 @@ in {
 
   # ensure correct permissions for postgresql and postgresql backup
   systemd.tmpfiles.rules = [
-    "Z ${stateDir} 0770 ${postgresql_user} ${postgresql_group} -"
-    "Z ${backupDir} 0770 ${postgresql_user} ${postgresql_group} -"
+    "Z ${stateDir} 0700 ${postgresql_user} ${postgresql_group} -"
+    "Z ${backupDir} 0700 ${postgresql_user} ${postgresql_group} -"
   ];
 }