diff --git a/ansible/roles/congress/templates/congress-api.json.j2 b/ansible/roles/congress/templates/congress-api.json.j2
index 794d4a00e4..58e15a1fb3 100644
--- a/ansible/roles/congress/templates/congress-api.json.j2
+++ b/ansible/roles/congress/templates/congress-api.json.j2
@@ -5,7 +5,7 @@
             "source": "{{ container_config_directory }}/congress.conf",
             "dest": "/etc/congress/congress.conf",
             "owner": "congress",
-            "perm": "0644"
+            "perm": "0600"
         }
     ]
 }
diff --git a/ansible/roles/congress/templates/congress-datasource.json.j2 b/ansible/roles/congress/templates/congress-datasource.json.j2
index 3f17482ab3..2825fc7f2b 100644
--- a/ansible/roles/congress/templates/congress-datasource.json.j2
+++ b/ansible/roles/congress/templates/congress-datasource.json.j2
@@ -5,7 +5,7 @@
             "source": "{{ container_config_directory }}/congress.conf",
             "dest": "/etc/congress/congress.conf",
             "owner": "congress",
-            "perm": "0644"
+            "perm": "0600"
         }
     ]
 }
diff --git a/ansible/roles/congress/templates/congress-policy-engine.json.j2 b/ansible/roles/congress/templates/congress-policy-engine.json.j2
index 9aafdf0fbc..691fdbcba0 100644
--- a/ansible/roles/congress/templates/congress-policy-engine.json.j2
+++ b/ansible/roles/congress/templates/congress-policy-engine.json.j2
@@ -5,7 +5,7 @@
             "source": "{{ container_config_directory }}/congress.conf",
             "dest": "/etc/congress/congress.conf",
             "owner": "congress",
-            "perm": "0644"
+            "perm": "0600"
         }
     ]
 }