diff --git a/compose.yaml b/compose.yaml
index 40b6cf2..4c35504 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -56,10 +56,13 @@ services:
       - /bin/sh
       - -ec
       - |
-        umask 077
-        printf 'appendonly yes\nappendfsync everysec\nmaxmemory 192mb\nmaxmemory-policy noeviction\nrequirepass %s\n' "$$REDIS_PASSWORD" > /tmp/redis.conf
-        chown redis:redis /data /tmp/redis.conf
-        exec su-exec redis redis-server /tmp/redis.conf
+        chown redis:redis /data
+        exec /usr/bin/setpriv --reuid redis --regid redis --clear-groups \
+          /bin/sh -ec '
+            umask 077
+            printf "appendonly yes\nappendfsync everysec\nmaxmemory 192mb\nmaxmemory-policy noeviction\nrequirepass %s\n" "$$REDIS_PASSWORD" > /data/redis.conf
+            exec redis-server /data/redis.conf
+          '
     volumes:
       - redis_data:/data
     networks: