diff --git a/Dockerfile b/Dockerfile
index b4c6e8aad..5060e7228 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -28,8 +28,7 @@ COPY --from=builder /usr/src/alfresco/licenses ./licenses
 
 RUN addgroup -g ${GROUPID} ${GROUPNAME} && \
   adduser -S -u ${USERID} -G ${GROUPNAME} -s "/bin/bash" ${USERNAME} && \
-  chown -R ${USERNAME}:${GROUPNAME} ./app.config.json && \
-  chown -R ${USERNAME}:${GROUPNAME} ./index.html && \
+  chown -R ${USERNAME}:${GROUPNAME} /usr/share/nginx/html && \
   chown -R ${USERNAME}:${GROUPNAME} /var/cache/nginx && \
   touch /var/run/nginx.pid && \
   chown -R ${USERNAME}:${GROUPNAME} /var/run/nginx.pid && \
diff --git a/docker/Readme.md b/docker/Readme.md
new file mode 100644
index 000000000..9fa52c7ca
--- /dev/null
+++ b/docker/Readme.md
@@ -0,0 +1,20 @@
+# ACA Docker Image
+
+Docker images are released to [docker hub](https://hub.docker.com/r/alfresco/alfresco-content-app)
+
+## Environment Variables
+
+OAUTH2:
+
+- APP_CONFIG_AUTH_TYPE: ...
+- APP_CONFIG_OAUTH2_HOST: ...
+- APP_CONFIG_OAUTH2_CLIENTID: ...
+- APP_CONFIG_OAUTH2_REDIRECT_LOGIN: ...
+- APP_CONFIG_OAUTH2_REDIRECT_LOGOUT: ...
+- APP_CONFIG_OAUTH2_REDIRECT_SILENT_IFRAME_URI: ...
+
+APP Misc:
+
+- BASE_PATH: ...
+- APP_BASE_SHARE_URL: ...
+- SERVER_PATH: Server path (usefull if behind a reverse proxy). E.g.: `/content-app` . Defaults to `/`
diff --git a/docker/entrypoint.sh b/docker/entrypoint.sh
index a7a391468..2c2f08024 100644
--- a/docker/entrypoint.sh
+++ b/docker/entrypoint.sh
@@ -81,4 +81,13 @@ if [ -n "${APP_BASE_SHARE_URL}" ];then
   cat /tmp/app.config.json > ./app.config.json
 fi
 
+if [[ $SERVER_PATH ]]; then
+  mkdir -p .$SERVER_PATH
+  cp -R * .$SERVER_PATH
+  replace="\/"
+  encoded=${SERVER_PATH//\//$replace}
+  sed -ri 's%href=".?/"%href="'$encoded/'"%g' /tmp/index.html && \
+  cat /tmp/index.html > .$SERVER_PATH/index.html
+fi
+
 nginx -g "daemon off;"