diff --git a/Dockerfile b/Dockerfile
index 8eff964..42e7f92 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,9 +2,9 @@ FROM alpine:3.21
 
 RUN \
   apk --no-cache upgrade && \
-  apk --no-cache add rsyslog rsyslog-mmutf8fix
+  apk --no-cache add rsyslog rsyslog-mmutf8fix tini
 
-COPY run.sh /
+COPY --chown=root:root --chmod=700 run.sh /
 
 EXPOSE 514/tcp
 EXPOSE 514/udp
@@ -16,4 +16,4 @@ ENV TARGET_HOST="127.0.0.1" \
 
 VOLUME [ "/extraconfig" ]
 
-ENTRYPOINT ["/bin/sh", "/run.sh"]
+ENTRYPOINT ["/sbin/tini", "--", "/run.sh"]