diff --git a/docker/prod/Dockerfile b/docker/prod/Dockerfile
index fe229acc..ef37a8bc 100644
--- a/docker/prod/Dockerfile
+++ b/docker/prod/Dockerfile
@@ -13,9 +13,6 @@ ENV SKIP_PIPENV true
 # Set port to open
 EXPOSE "${APP_PORT}"
 
-# Run as the unprivileged APP user
-USER "${APP_USER}"
-
 # Use dumb-init for proper signal handling
 ENTRYPOINT ["/usr/bin/dumb-init", "--"]
 
@@ -38,3 +35,6 @@ RUN set -x ; \
 # Update file ownership
 RUN set -x ; \
   chown -R atst:atat "${APP_DIR}"
+
+# Run as the unprivileged APP user
+USER "${APP_USER}"