diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..a5e2304
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+resources
+.hugo_build.lock
diff --git a/Containerfile b/Containerfile
index c645270..327f846 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,5 +1,17 @@
 FROM alpine
-RUN apk add git hugo
+
+ENV HUGO_ENVIRONMENT=production
+
 WORKDIR /app
-COPY . /app
+RUN apk add git hugo
+
+RUN adduser \
+    --disabled-password \
+    --gecos "" \
+    --uid 1000 \
+    hugo
+RUN chown hugo:hugo /app
+USER hugo
+
 CMD hugo server --bind 0.0.0.0
+COPY . /app
diff --git a/container-build.sh b/container-build.sh
index 73dafe5..e75c69e 100755
--- a/container-build.sh
+++ b/container-build.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 
-version="0.1.1"
+version="0.2.0"
 script_dir=$( cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd )
 tmp_dir="$(mktemp -d --suffix=-web)"
 cleanup () { rm -Rfv "$tmp_dir"; }