diff --git a/docker-compose.yml b/docker-compose.yml
index 3369fd5..fc44fbb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,3 +8,14 @@ services:
     ports:
       - 3000:3000
     restart: unless-stopped
+    user: 65534:65534 # equivalent to `nobody`
+    read_only: true
+    security_opt:
+      - no-new-privileges: true
+    cap_drop:
+      - ALL
+    networks:
+      - rimgo
+
+networks:
+  - rimgo
\ No newline at end of file