diff --git a/apps/templates/traefik.yaml b/apps/templates/traefik.yaml
index 8ceb84a..1530a61 100644
--- a/apps/templates/traefik.yaml
+++ b/apps/templates/traefik.yaml
@@ -34,7 +34,13 @@ spec:
             hasDns: "true"
 
           securityContext:
+            capabilities:
+              drop: [ALL]
+              add: [NET_BIND_SERVICE]
+            readOnlyRootFilesystem: true
+            runAsGroup: 0
             runAsNonRoot: false
+            runAsUser: 0
 
           affinity:
             podAntiAffinity: