diff --git a/Dockerfile b/Dockerfile
index 4c5cc3d..c75f26f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,8 +11,17 @@ RUN CGO_ENABLED=0 GOOS=linux go build -o saveany-bot .
 
 FROM alpine:latest
 
+RUN addgroup -S saveany && adduser -S saveany -G saveany
+
 WORKDIR /app
 
+RUN mkdir -p /app/data /app/downloads /app/cache && \
+    chown -R saveany:saveany /app
+
 COPY --from=builder /app/saveany-bot .
 
-CMD ["./saveany-bot"]
\ No newline at end of file
+RUN chmod +x /app/saveany-bot
+
+USER saveany
+
+CMD ["./saveany-bot"]