diff --git a/docker-compose.photoprism.podman.yml b/docker-compose.photoprism.podman.yml
index 8d7e5ea..26557f4 100644
--- a/docker-compose.photoprism.podman.yml
+++ b/docker-compose.photoprism.podman.yml
@@ -26,3 +26,9 @@ services:
   # host UID that owns the bind-mounted originals/.
   photoprism:
     userns_mode: keep-id
+
+  # Sidecar mutates the originals tree (rename / folder ops / heap
+  # convert / .duplicates archive) — same keep-id mapping so its writes
+  # land as the host user, not as a podman-subuid the host doesn't own.
+  sidecar:
+    userns_mode: keep-id