Ignore per-instance nginx configuration files
Run as non-privileged user
Run tcp endpoint on 0.0.0.0