diff --git a/docker-compose.yml b/docker-compose.yml
index b60cf12..0c669db 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,6 +3,10 @@ version: '3.8'
 services:
   mostlymatter:
     build: .
+    security_opt:
+      - no-new-privileges
+    cap_drop:
+      -  ALL  
     container_name: mostlymatter
     ports:
       - "8065:8065"
@@ -18,10 +22,15 @@ services:
       - ./data:/mattermost/data
       - ./logs:/mattermost/logs
       - ./config:/mattermost/config
+    user: "1001:1001"
     restart: unless-stopped
 
   db:
     image: postgres:15-alpine
+    security_opt:
+      - no-new-privileges
+    cap_drop:
+      -  ALL
     container_name: mostlymatter_db
     environment:
       - POSTGRES_USER=mostlymatter