make data volume read-only
update nginx.conf template - server root is /srv/www
rework build image target
remove obselete utility script
Dockerfile template in separate file
update build options