diff --git a/nginx/Dockerfile b/nginx/Dockerfile
index 98612812eb0133fa69522b63f204ce2d2c12a5fd..c9f7011f6ad2c308d3659063da0b6f61dbea1611 100644
--- a/nginx/Dockerfile
+++ b/nginx/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/nginx:1.23.3-alpine
+FROM docker.io/nginx:1.24.0-alpine
 # hadolint ignore=DL3018
 RUN rm -rf /etc/nginx/conf.d/* && \
     chmod 777 /run && \
@@ -19,8 +19,8 @@ RUN rm -rf /etc/nginx/conf.d/* && \
                 -batch && \
     setcap CAP_NET_BIND_SERVICE=+ep "$(command -v nginx)" && \
     chown nginx /var/ssl/site.*
-COPY conf.d/ /etc/nginx/conf.d/
-COPY snippets/ /etc/nginx/snippets/
+COPY --chown=root:root conf.d/ /etc/nginx/conf.d/
+COPY --chown=root:root snippets/ /etc/nginx/snippets/
 USER nginx
 RUN nginx -t
 HEALTHCHECK CMD curl --fail --verbose --user-agent 'Docker health check' --header "Host: status" http://localhost/ || exit 1