diff --git a/manifests/webpage.yaml b/manifests/webpage.yaml
index 53e90a1..06fe460 100644
--- a/manifests/webpage.yaml
+++ b/manifests/webpage.yaml
@@ -107,7 +107,12 @@ spec:
     spec:
       containers:
         - name: filebrowser
-          image: filebrowser/filebrowser:v2.63.13
+          # NOTE: v2-alpine is a moving tag (Renovate can't track it).
+          # Pinning to v2.63.13 (debian-based default) broke the PVC permissions
+          # (the image runs as a non-root UID and can't write to files left
+          # by the alpine variant). A clean re-pin needs either an initContainer
+          # to chown the PVC, or a fsGroup on the pod spec. Revisit when time permits.
+          image: filebrowser/filebrowser:v2-alpine
           ports:
             - containerPort: 8080
           volumeMounts: