From: Damian Myrda <monkey.damianek@gmail.com>
Date: Fri, 5 Jul 2024 20:47:05 +0000 (-0500)
Subject: Enforce read only
X-Git-Url: http://git.prime8.dev/?a=commitdiff_plain;h=9e3f25890c7037913be59902bae30654940c7417;p=p8d.git

Enforce read only
---

diff --git a/compose.yml b/compose.yml
index 569b573..225ef0e 100644
--- a/compose.yml
+++ b/compose.yml
@@ -6,8 +6,8 @@ services:
     ports:
       - "443:443"
     volumes:
-      - /etc/letsencrypt/live/prime8.dev/fullchain.pem:/ssl/fullchain.pem
-      - /etc/letsencrypt/live/prime8.dev/privkey.pem:/ssl/privkey.pem
+      - /etc/letsencrypt/live/prime8.dev/fullchain.pem:/ssl/fullchain.pem:ro
+      - /etc/letsencrypt/live/prime8.dev/privkey.pem:/ssl/privkey.pem:ro
     restart: always
     stop_grace_period: 1m
 
@@ -28,7 +28,7 @@ services:
       - mail:/state/:/var/mail-state/
       - mail:/logs/:/var/log/mail/
       - mail:/config/:/tmp/docker-mailserver/
-      - /etc/letsencrypt/:/etc/letsencrypt/
+      - /etc/letsencrypt/:/etc/letsencrypt/:ro
     cap_add:
       - NET_ADMIN
     healthcheck: