diff --git a/modules/core/logging.nix b/modules/core/logging.nix
index c242396..cc966c4 100644
--- a/modules/core/logging.nix
+++ b/modules/core/logging.nix
@@ -3,6 +3,7 @@
   services.rsyslogd = {
     enable = true;
     defaultConfig = ''
+      $FileCreateMode 0640
       :programname, isequal, "postfix" /var/log/postfix.log
 
       auth.*                          -/var/log/auth.log