diff --git a/.gitea/workflows/smoke.yml b/.gitea/workflows/smoke.yml
index 5f621f9..69f9788 100644
--- a/.gitea/workflows/smoke.yml
+++ b/.gitea/workflows/smoke.yml
@@ -23,14 +23,19 @@ jobs:
 
       - name: Write SSH key
         run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
           umask 077
           printf "%s" "${{ secrets.SSH_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
           if [ -n "${{ secrets.SSH_KNOWN_HOSTS }}" ]; then
             printf "%s\n" "${{ secrets.SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
+            chmod 644 ~/.ssh/known_hosts
           else
             echo "StrictHostKeyChecking no" >> ~/.ssh/config
           fi
 
+
       - name: Ping server
         run: ssh -i ~/.ssh/id_ed25519 ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} 'echo ok'