should be possible with `./docker/stacks/Dockerfile` - the image should use configurable uid or at a minimum not run as root.