diff --git a/freesailarr/values.yaml b/freesailarr/values.yaml
index 07b0ee4..1b5e395 100644
--- a/freesailarr/values.yaml
+++ b/freesailarr/values.yaml
@@ -300,11 +300,15 @@ flaresolverr:
       memory: 512Mi
       ephemeralStorage: 200Mi
   # The image runs as its own non-root user; chromium's writable paths (/tmp,
-  # /dev/shm) are emptyDirs, so the full hardening baseline holds.
+  # /dev/shm) are emptyDirs, so the full hardening baseline holds. runAsUser/
+  # runAsGroup pin the image's "flaresolverr" user numerically (uid/gid 1000,
+  # the image declares it by name only, which runAsNonRoot cannot verify).
   securityContext:
     allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
     runAsNonRoot: true
+    runAsUser: 1000
+    runAsGroup: 1000
     capabilities:
       drop:
         - ALL