diff --git a/apps/bentopdf/docker-compose.yml b/apps/bentopdf/docker-compose.yml
index 7636766..bc443c6 100644
--- a/apps/bentopdf/docker-compose.yml
+++ b/apps/bentopdf/docker-compose.yml
@@ -5,9 +5,9 @@ services:
     restart: unless-stopped
     read_only: true
     tmpfs:
-      - /tmp
-      - /var/cache/nginx
-      - /var/run
+      - /tmp:rw,noexec,nosuid,nodev,mode=1777
+      - /var/cache/nginx:rw,noexec,nosuid,nodev,uid=101,gid=101,mode=0755
+      - /var/run:rw,noexec,nosuid,nodev,uid=101,gid=101,mode=0755
     networks:
       - frontend_net
     security_opt: