diff --git a/Containerfile b/Containerfile
index 08cb8dd..81fe34c 100644
--- a/Containerfile
+++ b/Containerfile
@@ -20,7 +20,10 @@ RUN case "$(apk --print-arch)" in \
 
 FROM alpine:3.19
 WORKDIR /app
-RUN mkdir /app/wwwroot
+
+RUN mkdir wwwroot data && \
+	adduser -D appuser && \
+	chown appuser:appuser data
 
 # /* removes directory structure
 COPY --from=builder /release/* /app
@@ -28,5 +31,6 @@ COPY ./about.html /app/about.html
 COPY --from=frontend-builder /build/dist /app/wwwroot
 
 ENV WWW_DIR /app/wwwroot
+USER appuser
 EXPOSE 8080
 CMD [ "./pastabble" ]