diff --git a/cmdeploy/src/cmdeploy/__init__.py b/cmdeploy/src/cmdeploy/__init__.py
index df5bbaa2..61b43aaf 100644
--- a/cmdeploy/src/cmdeploy/__init__.py
+++ b/cmdeploy/src/cmdeploy/__init__.py
@@ -522,7 +522,7 @@ def deploy_iroh_relay(config) -> None:
         dest=f"/etc/iroh-relay.toml",
         user="root",
         group="root",
-        mode="644",
+        mode="444",
     )
     need_restart |= iroh_config.changed