diff --git a/README_SETUP.md b/README_SETUP.md
index 7274d261a8d5272d371e953481c8510987c9ee2e..c3edbf45670e820381d0f0fbacdd454c5f0ec2ac 100644
--- a/README_SETUP.md
+++ b/README_SETUP.md
@@ -5,7 +5,7 @@ We use docker and docker-compose to deploy CaosDB:
 - Docker >= 18.02
 - docker-compose >= 1.21
 
-On a Debian system, you can install the requirements with:
+On Debian based systems, you can install the requirements with:
 
 ```sh
 sudo apt-get install docker.io docker-compose
@@ -91,6 +91,8 @@ one with `openssl rsa -in oldKey.pem -out newKey.key`. If you want to use a
 certificate with a passphrase instead, please refer to envoy's documentation as
 to how to configure this correctly.
 
+Make sure that envoy can read the certificate. You can set the UID for envoy in
+the environment section of the envoy service in `docker-compose.yml`.
 
 ## Configuration
 
diff --git a/compose/docker-compose.yml b/compose/docker-compose.yml
index 88e9ef19433e2d8cf8fd6ba50a71d26c5482b19d..de6e0cd628bf61b7e45897a1491851a7f4e1217c 100644
--- a/compose/docker-compose.yml
+++ b/compose/docker-compose.yml
@@ -51,6 +51,8 @@ services:
 
   envoy:
     image: envoyproxy/envoy:v1.21-latest
+    # environment:
+    #   ENVOY_UID: 987
     volumes:
       - type: bind
         read_only: true