diff --git a/Dockerfile.cn b/Dockerfile.cn
index dd89670..9e15110 100644
--- a/Dockerfile.cn
+++ b/Dockerfile.cn
@@ -54,7 +54,9 @@ FROM base AS runner
 WORKDIR /app
 
 RUN sed -i 's#https\?://dl-cdn.alpinelinux.org/alpine#https://mirror.nju.edu.cn/alpine#g' /etc/apk/repositories && \
-    apk add --no-cache curl
+    apk add --no-cache curl && \
+    addgroup --system --gid 1001 nodejs && \
+    adduser --system --uid 1001 nextjs
 
 ENV NODE_ENV=production
 ENV NEXT_TELEMETRY_DISABLED=1