diff --git a/Dockerfile b/Dockerfile
index 7f1f69b..38dd2e0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,12 @@
 FROM python:3.7-slim
 ADD . /code
 WORKDIR /code
-RUN pip install -r requirements.txt
+RUN \
+  groupadd -r webssh && \
+  useradd -r -s /bin/false -g webssh webssh && \
+  chown -R webssh:webssh /code && \
+  pip install -r requirements.txt
+
+EXPOSE 8888/tcp
+USER webssh
 CMD ["python", "run.py"]