diff --git a/Dockerfile b/Dockerfile
index 99218e4..7934653 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -6,12 +6,13 @@ WORKDIR /go/src/github.com/Luzifer/nginx-sso
 ENV CGO_ENABLED=0
 
 RUN set -ex \
- && apk add --update \
+ && apk add --no-cache \
       git \
  && go install \
       -ldflags "-X main.version=$(git describe --tags || git rev-parse --short HEAD || echo dev)" \
       -mod=readonly
 
+
 FROM alpine
 
 LABEL maintainer "Knut Ahlers <knut@ahlers.me>"
@@ -30,6 +31,8 @@ COPY --from=builder /go/src/github.com/Luzifer/nginx-sso/frontend/*       /usr/l
 EXPOSE 8082
 VOLUME ["/data"]
 
+USER 1000:1000
+
 ENTRYPOINT ["/usr/local/bin/docker-start.sh"]
 CMD ["--"]