diff --git a/argocd/apps/penpot/penpot.yaml b/argocd/apps/penpot/penpot.yaml
index dadff6f..208caae 100644
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -36,12 +36,7 @@ spec:
           value: 'true'
         - name: ingress.annotations.cert-manager\.io\/cluster-issuer
           value: lets-encrypt-staging
-        - name: backend.containerSecurityContext
-          value: 'false'
-#          allowPrivilegeEscalation: 'false'
-#          capabilities:
-#            drop:
-#              - ALL
+        - backend.containerSecurityContext: {"allowPrivilegeEscalation":false,"capabilities":{"drop":["all"]},"readOnlyRootFilesystem":false,"runAsNonRoot":true,"runAsUser":1001}
     chart: penpot
   destination:
     server: 'https://kubernetes.default.svc'