diff --git a/Dockerfile b/Dockerfile
index 70e5907..916ea10 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,11 +2,21 @@
 # $ poetry build
 # $ docker build -t ghcr.io/ep1cman/unifi-protect-backup .
 FROM python:3.9-alpine
+RUN apk add shadow gcc musl-dev zlib-dev jpeg-dev rclone
 
+ENV PUID=1000
+ENV PGID=1000
+RUN groupmod -g $PGID users && \
+    useradd --uid $PUID -U -d /app -s /bin/false abc && \
+    usermod -G users abc && \
+    mkdir /config /app && \
+    chown abc /app
+ENV PATH="/app/.local/bin:${PATH}"
+USER abc
 WORKDIR /app
-RUN apk add gcc musl-dev zlib-dev jpeg-dev rclone
+
 COPY dist/unifi-protect-backup-0.4.0.tar.gz sdist.tar.gz
-RUN pip install sdist.tar.gz
+RUN pip install --user sdist.tar.gz
 
 ENV UFP_USERNAME=unifi_protect_user
 ENV UFP_PASSWORD=unifi_protect_password
@@ -18,7 +28,8 @@ ENV RCLONE_DESTINATION=my_remote:/unifi_protect_backup
 ENV VERBOSITY="v"
 ENV TZ=UTC
 ENV IGNORE_CAMERAS=""
+ENV RCLONE_CONFIG="/config/rclone.conf"
 
-VOLUME [ "/root/.config/rclone/" ]
+VOLUME [ "/config" ]
 
 CMD ["sh", "-c", "unifi-protect-backup -${VERBOSITY}"]