diff --git a/apps/k8s01/jellyfin/deployment.yaml b/apps/k8s01/jellyfin/deployment.yaml
index bf47c70dac95edd3b2ce85fa144407705c1e63ad..fd89f5be90e32545a3e75e74239fb26672fcce76 100644
--- a/apps/k8s01/jellyfin/deployment.yaml
+++ b/apps/k8s01/jellyfin/deployment.yaml
@@ -67,7 +67,12 @@ spec:
             amd.com/gpu: 1
             memory: 3.5Gi
             cpu: "4"
+        securityContext:
+          allowPrivilegeEscalation: false
       restartPolicy: Always
+      securityContext:
+        seccompProfile:
+          type: "RuntimeDefault"
       volumes:
       - name: movies
         persistentVolumeClaim: