docs: Adjust to latest options

README.md

@@ -92,7 +92,9 @@ Flags:
       --cache-prefixes string     url prefixes to cache (default "/v3/files")
       --cors string               allowed cors origins separated by comma (default "*")
       --dev                       enables dev mode
+      --drop-privileges           drops privileges to the given user/group
       --fallback-proxy string     optional comma separated list of fallback upstream proxy urls
+      --group string              give control to this group (requires root)
   -h, --help                      help for serve
       --import-proxied-releases   add every proxied modules to local store
       --jwt-secret string         jwt secret (default "changeme")
@@ -103,6 +105,7 @@ Flags:
       --port int                  the port to listen to (default 8080)
       --tls-cert string           path to tls cert file
       --tls-key string            path to tls key file
+      --user string               give control to this user (requires root)
 
 Global Flags:
       --config string   config file (default is $HOME/.gorge.yaml)
@@ -230,8 +233,9 @@ In dev mode these security checks are disabled.
 ### 💧 Dropping privileges
 
 There is no need to run gorge as root. But if you still want to do it, be sure to
-use the `--drop-privileges` options combined with `--user` and `--group`. You could
-set these to `www-data`. It will ensure gorge won't keep running as root.
+use the `--drop-privileges` option combined with `--user` and `--group`. You could
+set these to `www-data`. It will ensure gorge won't keep running as root, after the
+required root actions are done.
 
 ## 🐝 Development