diff --git a/docker/ubuntu/nightswatcher/nightswatcher.py b/docker/ubuntu/nightswatcher/nightswatcher.py
index dedf83a..d3a358f 100644
--- a/docker/ubuntu/nightswatcher/nightswatcher.py
+++ b/docker/ubuntu/nightswatcher/nightswatcher.py
@@ -72,6 +72,7 @@ def sha256sum(path):
     except FileNotFoundError:
         sha256 = hashlib.sha256(path.read_bytes()).hexdigest()
         sha256path(path).write_text(f'{sha256} {path.name}\n', encoding='utf-8')
+        sha256path(path).chmod(0o444)
     return sha256
 
 def fetch(url, expected_sha256):
@@ -138,6 +139,7 @@ def __str__(self):
 def cp(src, dst):
     logger.debug('cp %s %s', src, dst)
     shutil.copy(src, dst)
+    Path(dst).chmod(0o644)
 
 def rm(path):
     logger.debug('rm %s', path)
@@ -304,7 +306,6 @@ def on_post(self, req, _resp):
                 self._ota_update_debounce = None
             self._ota_update_debounce = gevent.spawn_later(self.OTA_UPDATE_DEBOUNCE_DELAY, lambda: update_queue.put(release))
         elif release['tag_name'] != 'ota' and data['action'] == 'published':
-            Path('body.json').write_bytes(body)
             update_queue.put(release)
 
 
diff --git a/docker/ubuntu/nightswatcher/settings.mk b/docker/ubuntu/nightswatcher/settings.mk
index 6d1f85d..52821d7 100644
--- a/docker/ubuntu/nightswatcher/settings.mk
+++ b/docker/ubuntu/nightswatcher/settings.mk
@@ -1,4 +1,4 @@
-VERSION = 2.0.0
+VERSION = 2.1.0
 
 IMAGE_BASE     = docker.io/library/ubuntu:24.04
 IMAGE_PLATFORM = arm64 x86_64