diff --git a/extras/wg-netns@.service b/extras/wg-netns@.service
index 0a0672d..2f6262d 100644
--- a/extras/wg-netns@.service
+++ b/extras/wg-netns@.service
@@ -13,6 +13,7 @@ RemainAfterExit=yes
 
 WorkingDirectory=%E/wireguard
 ConfigurationDirectory=wireguard
+ConfigurationDirectoryMode=700
 
 [Install]
 WantedBy=multi-user.target