diff --git a/kubernetes/apps/fediverse/peertube/app/config/production.yml b/kubernetes/apps/fediverse/peertube/app/config/production.yml
index a52739b..3757a5c 100644
--- a/kubernetes/apps/fediverse/peertube/app/config/production.yml
+++ b/kubernetes/apps/fediverse/peertube/app/config/production.yml
@@ -678,3 +678,11 @@ smtp:
   ca_file: null # Used for self signed certificates
 object_storage:
   max_upload_part: 100MB
+  upload_acl:
+    # Set this ACL on each uploaded object of public/unlisted videos
+    # Use null if your S3 provider does not support object ACL
+    public: 'public-read'
+    # Set this ACL on each uploaded object of private/internal videos
+    # PeerTube can proxify requests to private objects so your users can access them
+    # Use null if your S3 provider does not support object ACL
+    private: 'private'