diff --git a/apps/production/flyimg/deployment.yaml b/apps/production/flyimg/deployment.yaml
index aca1555..68ec06f 100644
--- a/apps/production/flyimg/deployment.yaml
+++ b/apps/production/flyimg/deployment.yaml
@@ -19,6 +19,8 @@ spec:
           image: flyimg/flyimg:1.4.12
           securityContext:
             allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
           ports:
             - containerPort: 80
           resources: