clean config, support read-only non-root docker

Signed-off-by: ngn <ngn@ngn.tf>

.gitignore

@@ -1,28 +1,5 @@
-lib/test.html
-lib/postdata.json
-lib/nextpage.json
-scraper/brave.html
-scraper/yandex.json
-scraper/marginalia.json
-banner_og/
-scraper/mojeek.html
-scraper/google.html
-scraper/google-img.html
-scraper/google-video.html
-scraper/google-news.html
-scraper/google-img-nextpage.html
-scraper/brave-image.html
-scraper/brave-video.html
-scraper/facebook.html
-scraper/facebook-nextpage.json
-scraper/yandex-video.json
-scraper/yandex.html
-scraper/soundcloud.json
-scraper/mp3-pm.html
-banner/*
-data/captcha/birds/
-data/captcha/fumo_plushies/
-data/captcha/minecraft/
-!banner/*default*
-scraper/curlie.html
-icons/*
+/compose.yml
+/docker-compose.yml
+/banners
+/captcha
+/config.php