Unprivileged docker (WIP)

[dokterbob]

Continuation of #1681.

In addition to a point rightly made on legacy support, the current nginx config expects to run as root.

Cleaner way to address this is arguably to run nginx (or similar) in a separate container (but this might yield challenges around current certbot setup).

nginx issues:

webapp         | nginx: [alert] could not open error log file: open() "/var/log/nginx/error.log" failed (13: Permission denied)
webapp         | 2025/05/20 10:28:10 [warn] 58#58: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /webodm/nginx/nginx.conf:4
webapp         | 2025/05/20 10:28:10 [emerg] 58#58: mkdir() "/var/lib/nginx/body" failed (13: Permission denied)

Guidelines towards this setup (which, as a bonus, upgrades nginx and certbot, which are kinda really critical to security):

• https://phoenixnap.com/kb/letsencrypt-docker
• https://pentacent.medium.com/nginx-and-lets-encrypt-with-docker-in-less-than-5-minutes-b4b8a60d3a71

Alternative approach might be using something like Traefik or Caddy which have ACME built in (and should yield much smaller image sizes).

Leaving this lingering, for now.