diff --git a/k3s/apps/photo/immich/immich-configmap.yaml b/k3s/apps/photo/immich/immich-configmap.yaml
index e122bbb..6ffcdac 100644
--- a/k3s/apps/photo/immich/immich-configmap.yaml
+++ b/k3s/apps/photo/immich/immich-configmap.yaml
@@ -18,6 +18,6 @@ data:
   DISABLE_REVERSE_GEOCODING: "false"
   REVERSE_GEOCODING_PRECISION: "2"
   PUBLIC_LOGIN_PAGE_MESSAGE: ""
-  PUID: "0"
-  PGID: "0"
+  PUID: "1001"
+  PGID: "100"
   DB_PASSWORD: "password"
diff --git a/k3s/apps/photo/immich/immich-library-immich-pv.yaml b/k3s/apps/photo/immich/immich-library-immich-pv.yaml
index 524cea8..1bdfa81 100644
--- a/k3s/apps/photo/immich/immich-library-immich-pv.yaml
+++ b/k3s/apps/photo/immich/immich-library-immich-pv.yaml
@@ -12,5 +12,5 @@ spec:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
   nfs:
-    path: /export/fastData/immichLibrary
+    path: /export/immichLibrary
     server: 192.168.178.166
diff --git a/k3s/apps/photo/immich/immich-library-pv.yaml b/k3s/apps/photo/immich/immich-library-pv.yaml
index 5cd0ec1..b717545 100644
--- a/k3s/apps/photo/immich/immich-library-pv.yaml
+++ b/k3s/apps/photo/immich/immich-library-pv.yaml
@@ -11,5 +11,5 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /export/fastData/immichLibrary  # Static path on the NFS server
+    path: /export/immichLibrary  # Static path on the NFS server
     server: 192.168.178.166
diff --git a/k3s/apps/photo/immich/immich-server-deployment.yaml b/k3s/apps/photo/immich/immich-server-deployment.yaml
index 4c8bf2c..796c457 100644
--- a/k3s/apps/photo/immich/immich-server-deployment.yaml
+++ b/k3s/apps/photo/immich/immich-server-deployment.yaml
@@ -25,7 +25,8 @@ spec:
           }]
     spec:
       securityContext:
-        fsGroup: 0
+        fsGroup: 100
+        fsGroupChangePolicy: OnRootMismatch
       serviceAccountName: default
       dnsPolicy: ClusterFirst
       initContainers:
@@ -60,7 +61,8 @@ spec:
           image: "ghcr.io/immich-app/immich-server:release"
           imagePullPolicy: Always
           securityContext:
-            runAsUser: 0
+            runAsUser: 1001
+            runAsGroup: 100
           ports:
             - containerPort: 3001
           env: