home.md

@@ -127,7 +127,7 @@ To make your application accessible, you'll want to route external traffic to th
 
 ## CI/CD GitLab Pipeline
 
-A GitLab pipeline was developed inside the `.gitlab-ci.yml` for automatic testing and deploying on a stage and production server. After installing a GitLab runner with the `stage` and `main` tags on the according server and starting it with `cd / && gitlab-runner run &`, code will be tested and deployed fully automated. The config.toml could look like the following. When using a similar approach, make sure that the `gitlab-runner` user is allowed to execute docker commands but no security relevant commands.
+A GitLab pipeline was developed inside the `.gitlab-ci.yml` for automatic testing and deploying on a stage and production server. After installing a GitLab runner with the `stage` and `main` tags on the according server and starting it with `cd / && gitlab-runner run &`, code will be tested and deployed fully automated. The config.toml could look like the following.
 
 ````
 concurrent = 1
@@ -150,6 +150,17 @@ shutdown_timeout = 0
   user = "gitlab-runner"
 ````
 
+**Important:** When using a similar approach, make sure that the `gitlab-runner` user is allowed to execute Docker commands but no security relevant commands. The following commands create the user and grant the required permissions.
+
+````
+sudo useradd -m -s /bin/bash gitlab-runner
+getent group docker | cut -d: -f3
+sudo usermod -aG <group_id> gitlab-runner
+sudo systemctl stop gitlab-runner
+sudo systemctl daemon-reload
+sudo systemctl start gitlab-runner
+````
+
 ## Proposed (V-)Server Setup Guide
 
 Assuming no existing server infrastructure is available, a Linux virtual private server (VPS) can be rented to host 19squared for approximately €4-11 per month. We recommend the following specs for a VPS acoomodating a 19squared instance: