diff --git a/webapps/mastodon/tasks/upgrade.yml b/webapps/mastodon/tasks/upgrade.yml
index 74959d3e..c2840963 100644
--- a/webapps/mastodon/tasks/upgrade.yml
+++ b/webapps/mastodon/tasks/upgrade.yml
@@ -43,6 +43,12 @@
     args:
       chdir: "~/mastodon"
       executable: /bin/bash # fails with /bin/sh
+  - name: Adjust permissions of files in public folder
+    file:
+      path: "~/mastodon/public"
+      state: directory
+      mode: 'o=rX'
+      recurse: true
   become_user: "{{ service }}"
 
 - name: Restart services