diff --git a/debian/postinst b/debian/postinst
index 7be9080863..099e135f0f 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -50,6 +50,8 @@ case "$1" in
       chown -R ${gitlab_user}: $i
     done
 
+    chmod 0700 ${gitlab_uploads_path}
+
     # nginx should be able to connect to gitlab-workhorse.socket and serve public
     chown ${gitlab_user}:${nginx_user} -R ${gitlab_uploads_path}/.. ${gitlab_pid_path}