diff --git a/apps/k8s01/jellyfin/deployment.yaml b/apps/k8s01/jellyfin/deployment.yaml
index fd89f5be90e32545a3e75e74239fb26672fcce76..9639d199f6245779b919e1b0056b7f079f9b9b03 100644
--- a/apps/k8s01/jellyfin/deployment.yaml
+++ b/apps/k8s01/jellyfin/deployment.yaml
@@ -71,6 +71,10 @@ spec:
           allowPrivilegeEscalation: false
       restartPolicy: Always
       securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
         seccompProfile:
           type: "RuntimeDefault"
       volumes: