Author here, I updated the article; now a user called "deployer" runs the app. Turns out it was easier now than when I started with the migration.