diff --git a/Dockerfile b/Dockerfile
index f226df7..594ce2c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -48,17 +48,17 @@ RUN adduser \
     --uid "${UID}" \
     imnyang
 
+RUN mkdir -p /app
+RUN chmod -R 755 /app
+RUN mkdir -p /app/uploads
+RUN chown -R imnyang:imnyang /app
+
 # Drop privileges for runtime.
 USER imnyang
 
 # Copy only the compiled binary from the build stage.
 COPY --from=build /bin/server /app/
 
-RUN chown -R imnyang:imnyang /app
-RUN chmod -R 755 /app
-
-RUN mkdir -p /app/uploads
-
 # Rocket: listen on all interfaces inside the container.
 ENV ROCKET_ADDRESS=0.0.0.0