diff --git a/Dockerfile b/Dockerfile
index e3b3e02..199077b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,7 +9,7 @@ RUN sed -i 's/%RELEASETAG%/'${RELEASETAG}'/' /src/layouts/partials/releasetag.ht
 RUN if [ "$BASE_URL" = ""]; then hugo; else hugo -b $BASE_URL; fi 
 
 # server
-FROM nginx:alpine
+FROM nginx:alpine3.21
 COPY --from=builder /src/public /usr/share/nginx/html
 # ------------
 # prepare for rootless operations