diff --git a/salt/profile/asknot/files/apache-vhost.conf b/salt/profile/asknot/files/apache-vhost.conf
index eb2b442..3f5604b 100644
--- a/salt/profile/asknot/files/apache-vhost.conf
+++ b/salt/profile/asknot/files/apache-vhost.conf
@@ -6,6 +6,10 @@
 
    DocumentRoot /usr/share/webapps/asknot-ng/
 
+   <Directory "/usr/share/webapps/asknot-ng/">
+     Require all granted
+   </Directory>
+
    RewriteEngine On
    Include /etc/apache2/asknot-ng-l10n.conf
    RewriteRule "^/$" "/en/" [R]
diff --git a/salt/profile/asknot/init.sls b/salt/profile/asknot/init.sls
index 4fd9419..25787c4 100644
--- a/salt/profile/asknot/init.sls
+++ b/salt/profile/asknot/init.sls
@@ -5,5 +5,5 @@ asknot_packages:
 
 /etc/apache2/vhosts.d/contribute.opensuse.org.conf:
   file.managed:
-    - mode: 755
+    - mode: 644
     - source: salt://profile/asknot/files/apache-vhost.conf