diff --git a/Dockerfile b/Dockerfile
index b929809..213a21a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,6 +23,9 @@ RUN apt-get update \
 COPY requirements.txt ./
 RUN pip install --no-cache-dir -r requirements.txt
 
+RUN useradd -Ms /bin/nologin user
+USER user
+
 COPY . .
 
 CMD [ "python3", "-u", "gronk.py", "--output-dir", "./web", "./notes" ]