diff --git a/src/Handler.php b/src/Handler.php
index 3fa5428..665c5af 100644
--- a/src/Handler.php
+++ b/src/Handler.php
@@ -139,6 +139,7 @@ public function createSettingsFile()
                 "\$settings['shepherd_site_id'] = getenv('SHEPHERD_SITE_ID');\n" .
                 "\$settings['shepherd_url'] = getenv('SHEPHERD_URL');\n" .
                 "\$settings['shepherd_token'] = getenv('SHEPHERD_TOKEN_FILE') ? file_get_contents(getenv('SHEPHERD_TOKEN_FILE')) : getenv('SHEPHERD_TOKEN');\n\n" .
+                "\$settings['install_profile'] = getenv('SHEPHERD_INSTALL_PROFILE') ?: 'standard';\n" .
                 "if (getenv('REDIS_ENABLED')) {\n" .
                 "  \$settings['redis.connection']['interface'] = 'PhpRedis';\n" .
                 "  \$settings['redis.connection']['host']      = getenv('REDIS_HOST') ?: 'redis';\n" .
@@ -168,6 +169,7 @@ public function createSettingsFile()
                 $shepherdSettings,
                 FILE_APPEND
             );
+            $this->filesystem->chmod($root . '/sites/default/settings.php', 0444);
         }
     }
 
@@ -180,7 +182,7 @@ public function createServicesFile()
 
         if (!$this->filesystem->exists($root . '/sites/default/services.yml') && $this->filesystem->exists($root . '/sites/default/default.services.yml')) {
             $this->filesystem->copy($root . '/sites/default/default.services.yml', $root . '/sites/default/services.yml');
-            $this->filesystem->chmod($root . '/sites/default/services.yml', 0666);
+            $this->filesystem->chmod($root . '/sites/default/services.yml', 0444);
         }
     }