diff --git a/nixarr/qbittorrent/default.nix b/nixarr/qbittorrent/default.nix
index e3b3a4f..8f692e6 100644
--- a/nixarr/qbittorrent/default.nix
+++ b/nixarr/qbittorrent/default.nix
@@ -153,6 +153,7 @@ in {
 
     systemd.services.qbittorrent = {
       serviceConfig.IOSchedulingPriority = 7;
+      serviceConfig.UMask = "0002";
 
       vpnConfinement = mkIf cfg.vpn.enable {
         enable = true;