Permission problem in combination with dhi.io/nginx

[konstamon]

I try to run the acme companion in conjunction with the dhi version of nginx on ubuntu using a docker compose setup. The hardened nginx ensures it does not run as root even though it is started with 'sudo docker compose up -d', but that means it cannot read the certificates created by the acme companion which does run as root and restricts access to the owner. I tried experimentally an ACME_POST_HOOK that allows read for all but that does not work. How to properly fix this constellation?