diff --git a/.github/workflows/build-nextcloud.yml b/.github/workflows/build-nextcloud.yml
index b460126..0d6d165 100644
--- a/.github/workflows/build-nextcloud.yml
+++ b/.github/workflows/build-nextcloud.yml
@@ -35,7 +35,7 @@ jobs:
           images: ghcr.io/${{ github.repository }}
           tags: |
             type=raw,value=latest
-            type=raw,value=32
+            type=raw,value=32.0.6
             type=raw,value=build-${{ github.run_number }}
 
       - name: Build and push Docker image
diff --git a/Dockerfile b/Dockerfile
index 9ff2ea6..39a7098 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,18 +1,44 @@
-FROM nextcloud:latest
+# FROM nextcloud:32.0.6
 
-ARG VERSION=32
+# ARG VERSION=32.0.6
 
+# # Update package lists
+# RUN apt-get update
+
+# # Install ffmpeg
+# RUN apt-get install -y ffmpeg
+
+# # Install nano
+# RUN apt-get install -y nano
+
+# #Install Node & NPM
+# RUN apt-get install -y nodejs npm
+
+# # list directories
+# RUN ls -lh
+
+
+FROM nextcloud:32.0.6
+ARG VERSION=32.0.6
+ 
 # Update package lists
 RUN apt-get update
-
+ 
 # Install ffmpeg
 RUN apt-get install -y ffmpeg
-
+ 
 # Install nano
 RUN apt-get install -y nano
-
-#Install Node & NPM
+ 
+# Install Node & NPM
 RUN apt-get install -y nodejs npm
-
-# list directories
+ 
+# Install Java (needed by libresign)
+RUN apt-get install -y default-jre-headless
+ 
+# Copy the occ hook script — runs on first container start after Nextcloud is ready
+COPY init-libresign.sh /docker-entrypoint-hooks.d/post-installation/init-libresign.sh
+RUN chmod +x /docker-entrypoint-hooks.d/post-installation/init-libresign.sh
+ 
+# List directories (optional debug step)
 RUN ls -lh
diff --git a/init-libresign.sh b/init-libresign.sh
new file mode 100644
index 0000000..0e8e0b7
--- /dev/null
+++ b/init-libresign.sh
@@ -0,0 +1,7 @@
+#!/bin/bash
+set -e
+ 
+echo "Running libresign Java install..."
+php /var/www/html/occ libresign:install --java
+echo "libresign Java install complete."
+