diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..f910332
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,8 @@
+FROM golang:alpine
+
+WORKDIR /app
+
+RUN adduser --disabled-password golang \
+  && chown golang:golang -R /app
+
+USER golang
diff --git a/docker-compose.yaml b/docker-compose.yaml
index c0944dc..230a47d 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -1,6 +1,6 @@
 services:
   app:
-    image: "golang:alpine"
+    build: "."
     volumes:
       - "./:/app"
     working_dir: /app