diff --git a/manifests/app_type.pp b/manifests/app_type.pp
index ef15b0e..698a311 100644
--- a/manifests/app_type.pp
+++ b/manifests/app_type.pp
@@ -198,14 +198,14 @@ define sunetdrive::app_type (
       force  => true,
       owner  => 'www-data',
       group  => 'root',
-      mode   => '0644',
+      mode   => '0640',
     }
     file { '/opt/nextcloud/audit.log':
       ensure => file,
       force  => true,
       owner  => 'www-data',
       group  => 'root',
-      mode   => '0644',
+      mode   => '0640',
     }
     file { '/opt/nextcloud/rclone.conf':
       ensure  => file,
diff --git a/manifests/onlyoffice.pp b/manifests/onlyoffice.pp
index 6d63ac0..2fd3359 100644
--- a/manifests/onlyoffice.pp
+++ b/manifests/onlyoffice.pp
@@ -16,14 +16,14 @@ class sunetdrive::onlyoffice () {
     command => "docker login registry.gitlab.collabora.com -u ${token_name} -p ${access_token}",
   }
   sunet::collabora::docs { 'sunet-onlyoffice':
-    dns         => [ '89.32.32.32' ],
-    extra_hosts => $extra_hosts,
+    dns           => [ '89.32.32.32' ],
+    extra_hosts   => $extra_hosts,
     extra_volumes => ['/opt/collabora/coolwsd.xml:/etc/coolwsd/coolwsd.xml'],
-    docker_tag  => $docker_tag,
-    docker_image => 'registry.gitlab.collabora.com/productivity/collabora-online-nc',
+    docker_tag    => $docker_tag,
+    docker_image  => 'registry.gitlab.collabora.com/productivity/collabora-online-nc',
   }
   file {'/opt/collabora/coolwsd.xml':
-    ensure => present,
+    ensure  => present,
     content => template('sunetdrive/document/coolwsd.xml.erb'),
   }
 }