diff --git a/Dockerfile b/Dockerfile
index 1cda8a0..f5e08bc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,3 +22,5 @@ RUN apk --no-cache add libconfig pcre2
 
 COPY "./container-entrypoint.sh" "/init"
 ENTRYPOINT [ "/init" ]
+
+USER nobody:nogroup
diff --git a/README.md b/README.md
index 97186e5..8611b9a 100644
--- a/README.md
+++ b/README.md
@@ -47,6 +47,8 @@ How to use
 
 ```bash
 docker run \
+  --cap-add CAP_NET_RAW \
+  --cap-add CAP_NET_BIND_SERVICES \
   --rm \
   -it \
   ghcr.io/yrutschle/sslh:latest \