diff --git a/Dockerfile b/Dockerfile
index ca26ef3..2c22260 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,8 +1,24 @@
-FROM bitnami/java:17.0.12-10-debian-12-r4
+FROM bitnami/java:17.0.12-10-debian-12-r4 AS builder
 
-COPY target/*.jar /app/app.jar
+WORKDIR /opt
 
-COPY script/entrypoint.sh /opt/scripts/entrypoint.sh
+RUN apt update && apt upgrade -y
+
+FROM builder AS app
+
+WORKDIR /app
+
+RUN addgroup -g 1001 app && adduser -u 1001 -G app -D app
+RUN rm -rf /var/cache/apk/* \
+    && chown app /app
+
+COPY --chown=1001 --from=builder /opt /opt
+
+USER 1001
+
+COPY --chown=1001 target/*.jar /app/app.jar
+
+COPY --chown=1001 script/entrypoint.sh /opt/scripts/entrypoint.sh
 RUN chmod 0740 /opt/scripts/entrypoint.sh
 
 CMD /opt/scripts/entrypoint.sh
\ No newline at end of file