diff --git a/k8s-apps/traefik/helm-values.yaml b/k8s-apps/traefik/helm-values.yaml
index a5680c1..6d9344b 100644
--- a/k8s-apps/traefik/helm-values.yaml
+++ b/k8s-apps/traefik/helm-values.yaml
@@ -8,8 +8,8 @@ certResolvers:
     storage: /data/acme.json
 persistence:
   enabled: true
-securityContext:
-  readOnlyRootFilesystem: false
+podSecurityContext:
+  fsGroup: 65532 # matches group for the initContainer below
 env:
  - name: CF_DNS_API_TOKEN
    valueFrom: