* let restore run as root in base container
* switch runtime container to alpine (was using debian before)
* chown stuff as nobody:nobody and become nobody to run the app
* as a consequence, we're no longer allowed to bind to :80 so the port
has been changed to :8081. that also needed to be reflected in the
compose file for traefik to know where to route traffic
* ASPNETCORE_ENVIRONMENT env var properly set to Production
* secrets are stored in env files, examples were added
* add .*.env to .{docker,git}ignore to prevent anybody from mistakenly
committing their env files (unless it's forced)
* [skip ci]
surtur