diff --git a/contrib/docker/goreleaser.Dockerfile b/contrib/docker/goreleaser.Dockerfile
index b38b43a6b..4f5832b42 100644
--- a/contrib/docker/goreleaser.Dockerfile
+++ b/contrib/docker/goreleaser.Dockerfile
@@ -12,9 +12,22 @@ RUN if [ "${TARGETARCH}" = "arm64" ]; then \
 
 FROM alpine:latest
 
-WORKDIR /root
 RUN apk --no-cache add ca-certificates
 COPY --from=builder /root/centaurid /usr/local/bin/centaurid
 
+RUN addgroup --gid 1025 -S composable && adduser --uid 1025 -S composable -G composable
+
+WORKDIR /home/composable
+USER composable
+
+# rest server
+EXPOSE 1317
+# tendermint p2p
+EXPOSE 26656
+# tendermint rpc
+EXPOSE 26657
+# grpc
+EXPOSE 9090
+
 ENTRYPOINT ["centaurid"]
 CMD [ "start" ]