OpenCDS should run as an unprivileged user, hence either a no-login account should be created, or the account under which the container will run should be used for placement of configuration files.  This will be the $HOME that is referenced below.

Externalized OpenCDS configuration options should be typically stored in the location below:

This file must contain the first three lines below.  The fourth and fifth lines are optional.

knowledge-repository.type=<repository type>
knowledge-repository.path=<repository path>
config.security=<path to security config file>
log4j.logfile=<full path to log file>
km.threads=4