diff --git a/modules/shared/sops/default.nix b/modules/shared/sops/default.nix
index f6ecc2a..501b43e 100755
--- a/modules/shared/sops/default.nix
+++ b/modules/shared/sops/default.nix
@@ -32,7 +32,7 @@ in {
   }
   (lib.genAttrs 
     (map (peer: "${peer}_wg_pub") config.syscfg.net.wg.server.peers)
-    (_: { mode = "0400"; })
+    (_: { mode = "0444"; })
   )
   (lib.genAttrs 
     (map (peer: "${peer}_ssh_pub") ["iriy" "avalon" "asgard" "valinor"])