diff --git a/nixbld-etc-nixos/secret_permissions.txt b/nixbld-etc-nixos/secret_permissions.txt
new file mode 100644
index 0000000..8cdea8b
--- /dev/null
+++ b/nixbld-etc-nixos/secret_permissions.txt
@@ -0,0 +1,10 @@
+-rw------- 1 root         root           backup-passphrase
+-rw------- 1 root         root           email_accounts.nix
+-rw------- 1 homu         homu           homu.toml
+-rw------- 1 matterbridge matterbridge   matterbridge.toml
+-rw------- 1 uwsgi        uwsgi          mattermost-github-integration.py
+-rw------- 1 nginx        nginx          muninpasswd
+-rw-rw---- 1 hydra        hydra          nixbld.m-labs.hk-1
+-rw-rw---- 1 hydra        hydra          nix_id_rsa
+-rw------- 1 root         root           rclone.conf
+-rw------- 1 root         root           wifi_password.nix