diff --git a/Containerfile b/Containerfile
index d0811e4..81fe34c 100644
--- a/Containerfile
+++ b/Containerfile
@@ -18,9 +18,12 @@ RUN case "$(apk --print-arch)" in \
 	       mv ./target/aarch64-unknown-linux-musl /release ;; \
 	esac
 
-FROM alpine:edge
+FROM alpine:3.19
 WORKDIR /app
-RUN mkdir /app/wwwroot
+
+RUN mkdir wwwroot data && \
+	adduser -D appuser && \
+	chown appuser:appuser data
 
 # /* removes directory structure
 COPY --from=builder /release/* /app
@@ -28,5 +31,6 @@ COPY ./about.html /app/about.html
 COPY --from=frontend-builder /build/dist /app/wwwroot
 
 ENV WWW_DIR /app/wwwroot
+USER appuser
 EXPOSE 8080
 CMD [ "./pastabble" ]