diff --git a/Makefile b/Makefile
index b4f86fe..e0f8c32 100755
--- a/Makefile
+++ b/Makefile
@@ -6,6 +6,7 @@ DESTDIR:=
 
 VERSION=23.32.0
 
+FLAGS:=-buildmode=pie -modcacherw -mod=readonly -trimpath
 LDFLAGS=-ldflags "-s -w -X main.version=${VERSION}" -tags osusergo,netgo
 
 all: web/*.pug.go ${TARGET}