diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6c7fda46..58c62aef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -62,6 +62,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * unbound: Use root hints provided by debian package dns-root-data instead of downloading them
 * vrrpd: variable to force update the switch script (default: false)
 * webapps/nextcloud: Add Ceph volume to fstab
+* webapps/nextcloud: Set home directory's mode
 
 ### Fixed
 
diff --git a/webapps/nextcloud/tasks/user.yml b/webapps/nextcloud/tasks/user.yml
index 020fce90..e9a398b9 100644
--- a/webapps/nextcloud/tasks/user.yml
+++ b/webapps/nextcloud/tasks/user.yml
@@ -26,6 +26,11 @@
   tags:
   - nextcloud
 
+- name: Set mode for home directory
+  ansible.builtin.file:
+    path: "{{ nextcloud_home }}"
+    mode: "0701"
+
 - name: Create top-level directories
   ansible.builtin.file:
     dest: "{{ item }}"