GitLab

This way the random secret is created on first run instead of docker build. We don't really want all standard imaages to share a password anymore than we want a static password.

Default docker installations should generate a random key instead of using a static secret that everyone can see.

Replace the shell with the uvicorn process, so it becomes PID 1 and receives the signals directly