diff --git a/Dockerfile b/Dockerfile
index 159d1dc..2d22c46 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -11,5 +11,11 @@ RUN npm run build
 
 EXPOSE 3000
 
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+RUN chown -R nextjs:nodejs /app
+
+USER nextjs
+
 # On lance directement via npm
 CMD ["npm", "start"]
\ No newline at end of file
diff --git a/admin/Dockerfile b/admin/Dockerfile
index 21e89c0..5942bb9 100644
--- a/admin/Dockerfile
+++ b/admin/Dockerfile
@@ -12,5 +12,11 @@ RUN npm run build
 EXPOSE 3001
 ENV PORT=3001
 
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+RUN chown -R nextjs:nodejs /app
+
+USER nextjs
+
 # On lance directement via npm (avec push de la BD si besoin, ou juste start)
 CMD ["sh", "-c", "npx prisma db push --schema=prisma/schema.prisma --accept-data-loss && npm start"]