Funkwhale only need to read the source/config files and read/write to the data directories. The source/config files manipulation must be handled by a privileged user.
jo