document running windmil as non-root (windmill-labs#871)

alpetric · web-flow · commit d4bf293bb5d4 · 2025-03-27T18:25:05.000+01:00
diff --git a/docs/advanced/1_self_host/index.mdx b/docs/advanced/1_self_host/index.mdx
@@ -586,6 +586,10 @@ Set environment variable DENO_TLS_CA_STORE=system,mozilla in docker-compose.yml
 
 Set REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt & SSL_CERT_FILE with the same value in the worker’s environment variables.
 
+## Running Windmill as non-root user
+
+Certain cloud providers require containers to be run as non-root users. For these cases you can use the `windmill` user (uid/gid 1000) or run it as any other non-root user by passing the `--user windmill` argument. For the [windmill helm chart](https://github.com/windmill-labs/windmill-helm-charts/tree/main/charts/windmill), you can pass the `runAsUser` or `runAsNonRoot` in the `podSecurityContext`.
+
 <!-- Resources -->
 
 [caddy]: https://caddyserver.com/
