diff --git a/services/jellyfin/deployment.yaml b/services/jellyfin/deployment.yaml
index b904d3a..ed92963 100644
--- a/services/jellyfin/deployment.yaml
+++ b/services/jellyfin/deployment.yaml
@@ -23,6 +23,10 @@ spec:
     spec:
       nodeSelector:
         jellyfin: "true"
+      securityContext:
+        fsGroup: 65532
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 65532
       runtimeClassName: nvidia
       containers:
         - name: jellyfin
@@ -36,6 +40,12 @@ spec:
               value: "compute,video,utility"
             - name: JELLYFIN_PublishedServerUrl
               value: "https://stream.bstein.dev"
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "65532"
+            - name: UMASK
+              value: "002"
           resources:
             limits:
               nvidia.com/gpu: 1