diff --git a/Dockerfile b/Dockerfile
index 8c0f847f..3ad92ace 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -25,7 +25,7 @@ RUN bin/build-hugo.sh
 # Serve image (stable nginx version)
 # This cannot use Alpine because test/Dockerfile builds on this image and
 # expects it to have apt-get.
-FROM nginx:1.28
+FROM nginx:1.30
 
 LABEL description="dcrweb server"
 LABEL version="1.0"