diff --git a/loki/loki.yaml b/loki/loki.yaml
index be55317..9ed241f 100644
--- a/loki/loki.yaml
+++ b/loki/loki.yaml
@@ -69,19 +69,34 @@ spec:
       labels:
         app: loki
     spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 10001
+        runAsGroup: 10001
+        fsGroup: 10001
+        fsGroupChangePolicy: "OnRootMismatch"
       containers:
         - name: loki
-          image: grafana/loki
+          image: grafana/loki:3.6.7
           args:
             - -config.file=/etc/loki/loki-config.yaml
             - -config.expand-env=true
           ports:
-            - containerPort: 3100
+            - name: http
+              containerPort: 3100
           volumeMounts:
             - name: config
               mountPath: /etc/loki
             - name: storage
               mountPath: /loki
+          readinessProbe:
+            httpGet:
+              path: /ready
+              port: 3100
+          livenessProbe:
+            httpGet:
+              path: /ready
+              port: 3100
       volumes:
         - name: config
           configMap: