diff --git a/nixos-module.nix b/nixos-module.nix
index 3769b5b..27d8bd6 100644
--- a/nixos-module.nix
+++ b/nixos-module.nix
@@ -275,6 +275,7 @@ in
       script = ''
         T=$(mktemp blocklistXXXX)
         wget -O $T https://rapidblock.org/blocked_domains.csv
+        chmod a+r $T
         mv $T ${lib.escapeShellArg blocklistPath}
       '';
       serviceConfig = {