diff --git a/src/dda/backup/postgresql.clj b/src/dda/backup/postgresql.clj
index 144142d..af35081 100644
--- a/src/dda/backup/postgresql.clj
+++ b/src/dda/backup/postgresql.clj
@@ -21,7 +21,8 @@
 (defn-spec create-pg-pass! nil?
   [config ::pg-config]
   (let [config-w-defaults (merge default config)]
-    (spit "/root/.pgpass" (domain/pgpass config-w-defaults))))
+    (spit "/root/.pgpass" (domain/pgpass config-w-defaults))
+    (i/execute! ["chmod" "0600" "/root/.pgpass"] config)))
 
 (defn-spec drop-create-db! nil?
   [config ::pg-config]
diff --git a/src/dda/backup/postgresql/domain.clj b/src/dda/backup/postgresql/domain.clj
index a047ded..a4ef19d 100644
--- a/src/dda/backup/postgresql/domain.clj
+++ b/src/dda/backup/postgresql/domain.clj
@@ -67,8 +67,8 @@
 
 (defn-spec pgpass string?
   [config ::pg-config]
-  (let [{:keys [pg-host pg-db pg-user pg-password]} config]
-    (str pg-host ":" pg-db ":" pg-user ":" pg-password)))
+  (let [{:keys [pg-host pg-port pg-db pg-user pg-password]} config]
+    (str pg-host ":" pg-port ":" pg-db ":" pg-user ":" pg-password)))
 
 (defn-spec db-drop-create-command ::cd/commands
   [config ::pg-config]
diff --git a/test/dda/backup/postgresql/domain_test.clj b/test/dda/backup/postgresql/domain_test.clj
index eb62e17..cb01c1f 100644
--- a/test/dda/backup/postgresql/domain_test.clj
+++ b/test/dda/backup/postgresql/domain_test.clj
@@ -8,7 +8,7 @@
 (st/instrument `cut/db-drop-create-command)
 
 (deftest should-calculate-pgpass
-  (is (= "localhost:mydb:user:password"
+  (is (= "localhost:5432:mydb:user:password"
          (cut/pgpass {:restic-repository "repo"
                       :backup-path "dir-at-repo"
                       :pg-host "localhost"