diff --git a/docker/php/Dockerfile b/docker/php/Dockerfile
index cc49dff..56abdda 100644
--- a/docker/php/Dockerfile
+++ b/docker/php/Dockerfile
@@ -6,8 +6,8 @@ FROM ${COMPOSER_IMAGE} AS composer
 FROM ${PHP_BASE_IMAGE}
 
 RUN set -eux; \
-    # 国内 ECS 访问 deb.debian.org（Fastly）易超时，apt 源切换到阿里云镜像站
-    sed -i 's|deb.debian.org|mirrors.aliyun.com|g' /etc/apt/sources.list; \
+    # 国内 ECS 访问 deb.debian.org（Fastly）易超时：main/updates 走阿里云镜像，security 走 TUNA（同步更及时）
+    sed -i 's|deb.debian.org/debian-security|mirrors.tuna.tsinghua.edu.cn/debian-security|g; s|deb.debian.org|mirrors.aliyun.com|g' /etc/apt/sources.list; \
     apt-get update && apt-get install -y --no-install-recommends \
         libfreetype6-dev \
         libjpeg62-turbo-dev \