diff --git a/frontend/Dockerfile b/frontend/Dockerfile
index 2a925f4..96239e7 100644
--- a/frontend/Dockerfile
+++ b/frontend/Dockerfile
@@ -11,10 +11,12 @@ FROM caddy:2.11-alpine
 # Copy static files and config
 COPY --from=build /app/dist /app/dist
 COPY Caddyfile /etc/caddy/Caddyfile
+RUN caddy fmt /etc/caddy/Caddyfile
 
-# Packages and caddy format
-RUN apk add --no-cache ca-certificates && \
-    caddy fmt --overwrite /etc/caddy/Caddyfile
+# Packages, remove file capabilities, and validate/format config
+RUN apk add --no-cache ca-certificates libcap && \
+    setcap -r /usr/bin/caddy && \
+    apk del libcap
 
 # Port, health check and non-root user
 EXPOSE 3000 3001