diff --git a/Dockerfile b/Dockerfile
index 4688298d..241f0d1e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -46,8 +46,10 @@ WORKDIR /apptoo
 # UID/GID alignment and filesystem preparation, then execs the server as this user.
 RUN groupadd -g 1024 hermeswebui \
     && useradd -u 1024 -d /home/hermeswebui -g hermeswebui -G users -s /bin/bash -m hermeswebui \
-    && mkdir -p /app /uv_cache \
-    && chown -R hermeswebui:hermeswebui /home/hermeswebui /app /uv_cache
+    && mkdir -p /app /uv_cache /workspace \
+    && chown -R hermeswebui:hermeswebui /home/hermeswebui /app /uv_cache /workspace \
+    && chmod 0755 /home/hermeswebui \
+    && chmod 1777 /app /uv_cache /workspace
 
 COPY --chmod=555 docker_init.bash /hermeswebui_init.bash