diff --git a/cluster/apps/download/prowlarr/helm-release.yaml b/cluster/apps/download/prowlarr/helm-release.yaml
index 3edb778..6a0dc41 100644
--- a/cluster/apps/download/prowlarr/helm-release.yaml
+++ b/cluster/apps/download/prowlarr/helm-release.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/radarr/helm-release.yaml b/cluster/apps/download/radarr/helm-release.yaml
index d1cdc36..e4e2e8e 100644
--- a/cluster/apps/download/radarr/helm-release.yaml
+++ b/cluster/apps/download/radarr/helm-release.yaml
@@ -43,11 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
       
     env:
       TZ: America/New_York
-      PGID: "1000"
-      PUID: "1000"
+      PGID: "10000"
+      PUID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/readarr/audiobook-helm.yaml b/cluster/apps/download/readarr/audiobook-helm.yaml
index b7de5b8..b5c9b79 100644
--- a/cluster/apps/download/readarr/audiobook-helm.yaml
+++ b/cluster/apps/download/readarr/audiobook-helm.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/readarr/ebook-helm.yaml b/cluster/apps/download/readarr/ebook-helm.yaml
index 9ef32ae..99f2315 100644
--- a/cluster/apps/download/readarr/ebook-helm.yaml
+++ b/cluster/apps/download/readarr/ebook-helm.yaml
@@ -43,9 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main:
diff --git a/cluster/apps/download/sonarr/helm-release.yaml b/cluster/apps/download/sonarr/helm-release.yaml
index 6b1c546..d8f5da4 100644
--- a/cluster/apps/download/sonarr/helm-release.yaml
+++ b/cluster/apps/download/sonarr/helm-release.yaml
@@ -43,11 +43,17 @@ spec:
         - name: config
           mountPath: /config
           readOnly: true
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 10000
+          runAsGroup: 10000
+          fsGroup: 10000
+          fsGroupChangePolicy: OnRootMismatch
 
     env:
       TZ: America/New_York
-      PGID: "1000"
-      PUID: "1000"
+      PUID: "10000"
+      PGID: "10000"
 
     service:
       main: