Using Nginx rever proxy for gitlab-ce (docker)

Hi, my server has a Nginx installed, and I would like to use it for reverse proxy.

However, the docker of gitlab-ce only creates the gitlab-ce group inside the docker, so that the permission of /gitlab-workhorse/socket is set to 998, which leads to permission error. I have to set the permission to 777 every time I restart gitlab docker, but it is a bit annoying. Is there any other way to solve this without adding www-data into root group?