diff --git a/Makefile b/Makefile
index 58aa095..3f6f15b 100644
--- a/Makefile
+++ b/Makefile
@@ -13,7 +13,7 @@ WWW_RSYNC_DEST = $(USER):$(WWW_ROOT)
 GEMINI_RSYNC_DEST = $(USER):$(GEMINI_ROOT)
 
 OUTPUT_DIR = public
-RSYNCFLAGS += -rlpcv --zc=zstd --zl=6 --skip-compress=gz/br/zst/png/webp/jpg/avif/jxl/mp4/mkv/webm/opus/mp3 -e "ssh -o KexAlgorithms=sntrup761x25519-sha512@openssh.com"
+RSYNCFLAGS += -rlpcv --zc=zstd --zl=6 --skip-compress=gz/br/zst/png/webp/jpg/avif/jxl/mp4/mkv/webm/opus/mp3 -e "ssh -o KexAlgorithms=sntrup761x25519-sha512@openssh.com" --chmod=D755,F644
 RSYNCFLAGS_EXTRA ?=
 # compression gets slow for extreme levels like the old "70109"
 ECT_LEVEL=9
diff --git a/scripts/compress.sh b/scripts/compress.sh
index 4549cb9..7e0898d 100644
--- a/scripts/compress.sh
+++ b/scripts/compress.sh
@@ -15,6 +15,7 @@ alias find_compressible='find "$output_dir" -type f \( -name "*.html" -o -name "
 if [ "$format" = "gzip" ]; then
 	compress_level="$3"
 	find_compressible -exec ect -quiet -"$compress_level" -gzip {} \;
+	find_compressible -exec touch -r {} {}.gz \;
 elif [ "$2" = "brotli" ]; then
 	find_compressible -exec brotli -Z -- {} \;
 fi