diff --git a/backend/Dockerfile b/backend/Dockerfile
index 5982a5b..fffe672 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -8,7 +8,11 @@ WORKDIR /app
 COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
+RUN groupadd --gid 10001 relay \
+    && useradd --uid 10001 --gid relay --create-home --shell /usr/sbin/nologin relay
+
 COPY . .
 
-CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
+USER relay
 
+CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]