diff --git a/bundles/gitea/items.py b/bundles/gitea/items.py
index a682bbc..a663f50 100644
--- a/bundles/gitea/items.py
+++ b/bundles/gitea/items.py
@@ -48,6 +48,7 @@ files['/etc/gitea/app.ini'] = {
         ),
     ),
     'owner': 'git',
+    'mode': '0600',
     'context': node.metadata['gitea'],
     'triggers': {
         'svc_systemd:gitea:restart',
diff --git a/bundles/gitea/metadata.py b/bundles/gitea/metadata.py
index d7a6738..62785cb 100644
--- a/bundles/gitea/metadata.py
+++ b/bundles/gitea/metadata.py
@@ -12,6 +12,9 @@ defaults = {
     },
     'gitea': {
         'conf': {
+            'DEFAULT': {
+                'WORK_PATH': '/var/lib/gitea',
+            },
             'database': {
                 'DB_TYPE': 'postgres',
                 'HOST': 'localhost:5432',