diff --git a/infra/party-lock/party-lock.py b/infra/party-lock/party-lock.py
index c0c8ddd..3d65ceb 100644
--- a/infra/party-lock/party-lock.py
+++ b/infra/party-lock/party-lock.py
@@ -6,6 +6,7 @@
 # ///
 
 import os
+import stat
 
 import paho.mqtt.client as mqtt
 
@@ -22,6 +23,8 @@ def rebuild_acl():
     lines.append("topic readwrite #")
     with open(ACL_PATH, "w") as f:
         f.write("\n".join(lines) + "\n")
+    os.chmod(ACL_PATH, stat.S_IRWXU)
+    os.chown(ACL_PATH, 1883, 1883)
     os.system("docker kill -s HUP mosquitto 2>/dev/null || true")
 
 def on_message(client, userdata, msg):