diff --git a/Dockerfile b/Dockerfile
index 310d18104..72c227b76 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -49,7 +49,7 @@ USER pleroma
 
 COPY --from=build --chown=pleroma:0 /release ${HOME}
 
-COPY ./config/docker.exs /etc/pleroma/config.exs
+COPY --chown=pleroma --chmod=640 ./config/docker.exs /etc/pleroma/config.exs
 COPY ./docker-entrypoint.sh ${HOME}
 
 EXPOSE 4000
diff --git a/changelog.d/dockerfile-config-perms.fix b/changelog.d/dockerfile-config-perms.fix
new file mode 100644
index 000000000..49ea5becb
--- /dev/null
+++ b/changelog.d/dockerfile-config-perms.fix
@@ -0,0 +1 @@
+- Fix config ownership in dockerfile to pass restriction test