diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 7723fe4..63666bd 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -173,7 +173,8 @@ jobs:
       - name: Deploy via rsync
         run: |
           cp .env _site/.env
-          rsync -rl --delete \
+          rsync -rlp --delete \
+            --chmod=Du=rwx,Dgo=rx,Fu=rw,Fgo=r \
             --exclude='content/.indiekit/' \
             --exclude='og/' \
             --exclude='fonts/' \
@@ -183,11 +184,13 @@ jobs:
 
       - name: Sync OG images and fonts
         run: |
-          rsync -rl --ignore-existing \
+          rsync -rlp --ignore-existing \
+            --chmod=Du=rwx,Dgo=rx,Fu=rw,Fgo=r \
             -e "ssh -p 222" \
             _site/og/ \
             ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:/usr/local/bastille/jails/web/root/usr/local/www/blog/og/
-          rsync -rl --ignore-existing \
+          rsync -rlp --ignore-existing \
+            --chmod=Du=rwx,Dgo=rx,Fu=rw,Fgo=r \
             -e "ssh -p 222" \
             _site/fonts/ \
             ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:/usr/local/bastille/jails/web/root/usr/local/www/blog/fonts/