diff --git a/deployments/continuous-deployment-config/oc10_ocis_parallel/latest.yml b/deployments/continuous-deployment-config/oc10_ocis_parallel/latest.yml
index 85bb9cd401..8f78eb2647 100644
--- a/deployments/continuous-deployment-config/oc10_ocis_parallel/latest.yml
+++ b/deployments/continuous-deployment-config/oc10_ocis_parallel/latest.yml
@@ -17,6 +17,7 @@
     - "*.oc10-ocis-parallel.latest.owncloud.works"
 
   vars:
+    os_env_umask: 022 # https://github.com/dev-sec/ansible-collection-hardening/blob/master/roles/os_hardening/README.md#variables
     ssh_authorized_keys:
       - https://github.com/butonic.keys
       - https://github.com/C0rby.keys