diff --git a/Dockerfile b/Dockerfile
index 9afa8c3..69f46ac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,6 +12,8 @@ RUN npm run build
 # ── Stage 2: serve ──────────────────────────────────────────────────────────
 FROM nginx:alpine
 
+RUN apk add --no-cache apache2-utils
+
 # Copy built assets
 COPY --from=builder /app/dist /usr/share/nginx/html
 
diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
index c07dafa..7ec97ec 100644
--- a/docker-entrypoint.sh
+++ b/docker-entrypoint.sh
@@ -7,7 +7,7 @@ if [ -z "$AUTH_USER" ] || [ -z "$AUTH_PASSWORD" ]; then
   exit 1
 fi
 
-echo "${AUTH_USER}:$(openssl passwd -apr1 "${AUTH_PASSWORD}")" > /etc/nginx/.htpasswd
+htpasswd -bc /etc/nginx/.htpasswd "${AUTH_USER}" "${AUTH_PASSWORD}"
 
 # Hand off to the official nginx entrypoint (runs envsubst on *.template files)
 exec /docker-entrypoint.sh "$@"