diff --git a/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml b/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
index 39a7c5799..69d7d6396 100644
--- a/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
+++ b/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
@@ -29,6 +29,10 @@ spec:
       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        runAsGroup: 1000
+        runAsUser: 1000
       hostIPC: false
       hostNetwork: false
       hostPID: false
@@ -37,6 +41,10 @@ spec:
         - env:
             - name: VPN_SERVICE_PROVIDER
               value: protonvpn
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
             - name: VPN_TYPE
               value: wireguard
             - name: WIREGUARD_PRIVATE_KEY
@@ -99,7 +107,7 @@ spec:
             - name: YUBAL_HOST
               value: 0.0.0.0
             - name: YUBAL_PORT
-              value: "8080"
+              value: "8000"
             - name: YUBAL_LOG_LEVEL
               value: INFO
           image: ghcr.io/guillevc/yubal:4.0.0
@@ -110,7 +118,7 @@ spec:
               cpu: 10m
               memory: 128Mi
           volumeMounts:
-            - mountPath: /app
+            - mountPath: /app/config
               name: config
             - mountPath: /app/data
               name: music