diff --git a/.docker/Dockerfile-distroless-static b/.docker/Dockerfile-distroless-static
new file mode 100644
index 00000000000..352fc467791
--- /dev/null
+++ b/.docker/Dockerfile-distroless-static
@@ -0,0 +1,8 @@
+FROM gcr.io/distroless/static-debian11:nonroot
+
+COPY hydra /usr/bin/hydra
+# Declare the standard ports used by hydra (4444 for public service endpoint, 4445 for admin service endpoint)
+EXPOSE 4444 4445
+
+ENTRYPOINT ["hydra"]
+CMD ["serve", "all"]
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 70968ecbc22..8be207b170b 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -8,6 +8,6 @@ variables:
   buildinfo_hash: "github.com/ory/hydra/v2/driver/config.Commit"
   buildinfo_tag: "github.com/ory/hydra/v2/driver/config.Version"
   buildinfo_date: "github.com/ory/hydra/v2/driver/config.Date"
-  dockerfile: ".docker/Dockerfile-alpine"
-
+  dockerfile_alpine: ".docker/Dockerfile-alpine"
+  dockerfile_static: ".docker/Dockerfile-distroless-static"
 project_name: hydra