diff --git a/global/overlay/etc/puppet/manifests/cosmos-site.pp b/global/overlay/etc/puppet/manifests/cosmos-site.pp
index cfb4b444..62b56846 100644
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@@ -147,7 +147,7 @@ class md_signer($dest_host="localhost",$dest_dir="") {
       ssh_privkey       => safe_hiera("publisher_ssh_privkey","NOT SET IN HIERA")
    } ->
    sunet::scriptherder::cronjob { "${name}-publish":
-      cmd               => "env RSYNC_ARGS='--chown=www-data:www-data' /usr/local/bin/mirror-mdq.sh http://localhost root@${dest_host}:${dest_dir}",
+      cmd               => "env RSYNC_ARGS='--chown=www-data:www-data --chmod=D0755,F0664' /usr/local/bin/mirror-mdq.sh http://localhost root@${dest_host}:${dest_dir}",
       minute            => '*/5',
       ok_criteria       => ['exit_status=0'],
       warn_criteria     => ['max_age=30m']