diff --git a/pdns-admin-base-ngoduykhanh/Dockerfile b/pdns-admin-base-ngoduykhanh/Dockerfile
index 1d0b279..638f2f1 100644
--- a/pdns-admin-base-ngoduykhanh/Dockerfile
+++ b/pdns-admin-base-ngoduykhanh/Dockerfile
@@ -39,4 +39,5 @@ RUN envtpl < /config.py.tpl > /opt/powerdns-admin/config.py \
 RUN yarn install --pure-lockfile --production \
   && yarn cache clean \
   && flask assets build \
-  && chown -R uwsgi: /opt/powerdns-admin/powerdnsadmin/static/.webassets-cache
+  && chown -R uwsgi: /opt/powerdns-admin/powerdnsadmin/static/.webassets-cache \
+  && chown -R uwsgi: /opt/powerdns-admin/flask_session
diff --git a/pdns-admin-base-ngoduykhanh/config.py.tpl b/pdns-admin-base-ngoduykhanh/config.py.tpl
index 15e9b69..95be510 100644
--- a/pdns-admin-base-ngoduykhanh/config.py.tpl
+++ b/pdns-admin-base-ngoduykhanh/config.py.tpl
@@ -6,6 +6,17 @@ BIND_ADDRESS = '0.0.0.0'
 PORT = 9191
 HSTS_ENABLED = False
 
+# CAPTCHA Config
+CAPTCHA_ENABLE = True
+CAPTCHA_LENGTH = 6
+CAPTCHA_WIDTH = 160
+CAPTCHA_HEIGHT = 60
+CAPTCHA_SESSION_KEY = 'captcha_image'
+
+# Server side sessions tracking
+# Set to TRUE for CAPTCHA, or enable another stateful session tracking system
+FILESYSTEM_SESSIONS_ENABLED = True
+
 # SAML Authnetication
 SAML_ENABLED = False