diff --git a/clusters/cl01tl/manifests/jellyfin/Deployment-jellyfin.yaml b/clusters/cl01tl/manifests/jellyfin/Deployment-jellyfin.yaml
index 9401913ca..517c7a152 100644
--- a/clusters/cl01tl/manifests/jellyfin/Deployment-jellyfin.yaml
+++ b/clusters/cl01tl/manifests/jellyfin/Deployment-jellyfin.yaml
@@ -29,6 +29,9 @@ spec:
       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
       hostIPC: false
       hostNetwork: false
       hostPID: false