diff --git a/docker/client/compose.sls b/docker/client/compose.sls
index 11c0fdd..dd269e9 100644
--- a/docker/client/compose.sls
+++ b/docker/client/compose.sls
@@ -56,6 +56,7 @@
     - name: {{ client.compose.base }}/{{ app }}/docker-compose.yml
     - source: salt://docker/files/docker-compose.yml
     - template: jinja
+    - mode: 600
     - defaults:
         compose: {{ compose }}
         volume: {{ compose.volume|default({}) }}
diff --git a/docker/client/stack.sls b/docker/client/stack.sls
index 329fd97..b7bac65 100644
--- a/docker/client/stack.sls
+++ b/docker/client/stack.sls
@@ -16,6 +16,7 @@
     - name: {{ client.compose.base }}/{{ app }}/docker-compose.yml
     - source: salt://docker/files/docker-compose.yml
     - template: jinja
+    - mode: 600
     - defaults:
         compose: {{ compose }}
         volume: {{ compose.volume|default({}) }}