Got a feedback from someone to do the following:

• Make the app stateless, using either redis or postgresql when you need to persist (both are easy to make HA)

• If you use local storage, store config outside of your app directory, so that docker containers can run as non-root, read-only

• Expose a github-release-aligned version directly in the UI and manifest.json to make it easier for users to track which version they're on

• Test it with docker --readonly --user=nobody or something like that, to be sure it's userid-agnostic and doesn't require local persistence :)