diff --git a/Dockerfile b/Dockerfile
index 400d286..b79bb63 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,11 +15,12 @@ FROM harbor.merlin.xin/mirrors/docker.io/library/eclipse-temurin:17-jre-alpine
 WORKDIR /app
 COPY --from=builder /app/target/*.jar app.jar
 
+RUN addgroup -S spring && adduser -S spring -G spring
+
 RUN mkdir -p /app/uploads/photo \
  && chown -R spring:spring /app/uploads
 
-# 非 root 用户运行
-RUN addgroup -S spring && adduser -S spring -G spring
+
 USER spring
 
 ENTRYPOINT ["java","-jar","/app/app.jar", "--spring.config.location=file:/app/application.yml"]