Through this MR, the image does not run anymore as UID 0, which should improve (perceived) security and remove some nagging by i.e uWSGI.

To be tested:

• If it can be used with the current DB, (may need to chown it to 1000:1000, but please: backup first, test afterwards)