diff --git a/ops/modules/depot-replica.nix b/ops/modules/depot-replica.nix
index f5f02a18a..b71f10409 100644
--- a/ops/modules/depot-replica.nix
+++ b/ops/modules/depot-replica.nix
@@ -33,7 +33,7 @@ in
       isSystemUser = true;
       createHome = true;
       home = cfg.path;
-      homeMode = "750"; # group can read depot
+      homeMode = "755"; # everyone can read depot
       openssh.authorizedKeys.keys = lib.singleton cfg.key;
       shell = pkgs.bashInteractive; # gerrit needs to run shell commands
     };