diff --git a/nextcloud/helmrelease-nextcloud.yaml b/nextcloud/helmrelease-nextcloud.yaml
index 81e3fc1..4767b6c 100644
--- a/nextcloud/helmrelease-nextcloud.yaml
+++ b/nextcloud/helmrelease-nextcloud.yaml
@@ -69,6 +69,7 @@ spec:
           passwordKey: "password"
 
       securityContext:
+        runAsNonRoot: true
         capabilities:
           add:
             - SYS_ADMIN