diff --git a/Dockerfile b/Dockerfile
index 862cdc0..8b014b2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,6 +5,13 @@ EXPOSE 8080
 
 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 
+# 创建与宿主机匹配的 UID/GID
+ARG TARGET_UID=0
+ARG TARGET_GID=0
+
+RUN groupadd -g $TARGET_GID appuser && \
+    useradd -u $TARGET_UID -g $TARGET_GID -d /app -s /bin/bash appuser
+
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
 COPY ["src/Core/Core.csproj", "src/Core/"]
diff --git a/docker-compose.yml b/docker-compose.yml
index 5a91942..ceab76a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,7 +9,7 @@
       - TZ=Asia/Shanghai
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - /wd/volc/media/tv:/data/tv
+      - /wd/volc/media/tv:/data/tv:rw
 
   nas_robot_proxy:
     image: beevelop/nginx-basic-auth:v2023.10.1