install river in container
set host parameters so that elasticsearch is only accessible from within the container
no need for nginx proxy for es
add sudoer user for elasticboard
change so that app is run as elasticboard user