[ACA-2229] docker security fixes (#980)

* docker permission fixes

* remove index.html edit permissions

docker/nginx.conf

@@ -0,0 +1,31 @@
+worker_processes  1;
+
+events {
+  worker_connections  1024;
+}
+
+http {
+  server {
+    listen 8080;
+    server_name  localhost;
+
+    root   /usr/share/nginx/html;
+    index  index.html index.htm;
+    include /etc/nginx/mime.types;
+
+    gzip on;
+    gzip_min_length 1000;
+    gzip_proxied expired no-cache no-store private auth;
+    gzip_types text/plain text/css application/json application/javascript application/x-javascript text/xml application/xml application/xml+rss text/javascript;
+
+    location / {
+      try_files $uri $uri/ /index.html;
+    }
+
+    location ~ \.html$ {
+      add_header Cache-Control "private, no-cache, no-store, must-revalidate";
+      add_header Expires "Sat, 01 Jan 2000 00:00:00 GMT";
+      add_header Pragma no-cache;
+    }
+  }
+}