nginx dockerfile non root user