Nginx: running on non-privileged port (8080)

BREAKING: Newer docker releases (1.11+) on certain platforms ship with updated default security profiles. These disable the existing capability addition trick, setcap, that previously allowed an unprivileged nginx user to bind to a privileged port (80). Instead, nginx now uses an unprivileged port (8080).