diff --git a/modules/30-services-software/penpot-service/main.tf b/modules/30-services-software/penpot-service/main.tf
index 87e973c..5b09bc9 100644
--- a/modules/30-services-software/penpot-service/main.tf
+++ b/modules/30-services-software/penpot-service/main.tf
@@ -55,6 +55,8 @@ locals {
   # Disable emails and enable OIDC since this is a private instanced managed with Authentik
   penpot_frontend_env_vars = {
     PENPOT_FLAGS = "disable-registration disable-email-verification disable-smtp enable-prepl-server enable-login-with-oidc"
+    PUID=var.user_id
+    PGID=var.group_id
   }
 
   penpot_backend_env_vars = {
diff --git a/modules/30-services-software/penpot-service/variables.tf b/modules/30-services-software/penpot-service/variables.tf
index 16c199d..c971115 100644
--- a/modules/30-services-software/penpot-service/variables.tf
+++ b/modules/30-services-software/penpot-service/variables.tf
@@ -30,13 +30,13 @@ variable "networks" {
 variable "user_id" {
   description = "User ID for container permissions"
   type        = string
-  default     = "1000"
+  default     = "1001"
 }
 
 variable "group_id" {
   description = "Group ID for container permissions"
   type        = string
-  default     = "1000"
+  default     = "1001"
 }
 
 variable "timezone" {