diff --git a/helm/shorefront/templates/postgres-deployment.yaml b/helm/shorefront/templates/postgres-deployment.yaml
index 6bd21cd..e7859a3 100644
--- a/helm/shorefront/templates/postgres-deployment.yaml
+++ b/helm/shorefront/templates/postgres-deployment.yaml
@@ -17,9 +17,9 @@ spec:
         app: postgres
     spec:
       securityContext:
-        runAsUser: 70
-        runAsGroup: 70
-        fsGroup: 70
+        runAsUser: {{ .Values.postgres.runAsUser }}
+        runAsGroup: {{ .Values.postgres.runAsGroup }}
+        fsGroup: {{ .Values.postgres.runAsGroup }}
       containers:
         - name: postgres
           image: "{{ .Values.postgres.image }}:{{ .Values.postgres.tag }}"
diff --git a/helm/shorefront/values.yaml b/helm/shorefront/values.yaml
index 5b1fdac..49d2c13 100644
--- a/helm/shorefront/values.yaml
+++ b/helm/shorefront/values.yaml
@@ -19,6 +19,9 @@ postgres:
   tag: "15-alpine"
   database: shorefront
   user: shorefront
+  # NFS squashes all writes to this uid/gid (Unraid default: nobody=99, gid=100)
+  runAsUser: 99
+  runAsGroup: 100
   resources:
     requests: { cpu: 100m, memory: 128Mi }
     limits: { cpu: 500m, memory: 512Mi }