diff --git a/birdnet-pi/rootfs/custom-services.d/30-monitoring.sh b/birdnet-pi/rootfs/custom-services.d/30-monitoring.sh
index b91a764f5..21c0f7d25 100755
--- a/birdnet-pi/rootfs/custom-services.d/30-monitoring.sh
+++ b/birdnet-pi/rootfs/custom-services.d/30-monitoring.sh
@@ -16,7 +16,8 @@ source /config/birdnet.conf 2>/dev/null
 ingest_dir="$RECS_DIR/StreamData"
 if [ ! -d "$ingest_dir" ]; then
     mkdir -p "$ingest_dir"
-    chmod -R pi:pi
+    chown -R pi:pi "$ingest_dir"
+    chmod -R 755 "$ingest_dir"
 fi
 
 # Other folder if no RTSP STREAM ?
@@ -24,7 +25,8 @@ if [ -z "${RTSP_STREAM}" ]; then
     ingest_dir="${RECS_DIR}/$(date +"%B-%Y/%d-%A")"
     if [ ! -d "$ingest_dir" ]; then
         mkdir -p "$ingest_dir"
-        chmod -R pi:pi
+        chown -R pi:pi "$ingest_dir"
+        chmod -R 755 "$ingest_dir"
     fi
 fi
 
diff --git a/birdnet-pi/rootfs/etc/cont-init.d/01-structure.sh b/birdnet-pi/rootfs/etc/cont-init.d/01-structure.sh
index 4d5d8f367..37218e297 100755
--- a/birdnet-pi/rootfs/etc/cont-init.d/01-structure.sh
+++ b/birdnet-pi/rootfs/etc/cont-init.d/01-structure.sh
@@ -50,6 +50,7 @@ fi
 # Permissions for created files and folders
 echo "... set permissions to user pi"
 chown -R pi:pi /config /etc/birdnet "$BIRDSONGS_FOLDER" /tmp
+chmod -R 755 /config /config /etc/birdnet "$BIRDSONGS_FOLDER" /tmp
 
 # Save default birdnet.conf to perform sanity check
 cp "$HOME"/BirdNET-Pi/birdnet.conf "$HOME"/BirdNET-Pi/birdnet.bak
@@ -73,7 +74,7 @@ done
 
 # Permissions for created files and folders
 echo "... check permissions"
-chmod -R 664 /config/*
+chmod -R 755 /config/*
 chmod 777 /config
 
 echo " "