Launch gunicorn as gracedb:django_writers

Dockerfile

@@ -79,4 +79,7 @@ RUN DJANGO_SETTINGS_MODULE=${SETTINGS_MODULE} \
     DJANGO_PRIMARY_FQDN=fake_fqdn \
     python manage.py collectstatic --noinput
 
+RUN groupadd -g 503 django_writers && \
+    useradd -M -u 50001 -g django_writers -s /bin/false gracedb
+
 CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/supervisord.conf"]

docker/supervisord-apache2.conf

@@ -8,8 +8,8 @@ priority=3
 [program:gracedb]
 command=/usr/local/bin/gunicorn config.wsgi:application --reload --config /app/gracedb_project/config/gunicorn_config.py
 directory=/app/gracedb_project
-#user=www-data
-#group=www-data
+user=gracedb
+group=django_writers
 stdout_logfile=/dev/fd/1
 stdout_logfile_maxbytes=0
 redirect_stderr=true