make assets, config and locales readable only

docker/Dockerfile

@@ -25,6 +25,7 @@ RUN sed -i 's/host: \(127.0.0.1\|localhost\)/host: postgres/' config/config.yml
 COPY ./config/sql/ ./config/sql/
 COPY ./locales/ ./locales/
 COPY --from=builder /invidious/invidious .
+RUN chmod o+rX -R ./assets ./config ./locales
 
 EXPOSE 3000
 USER invidious