From 9e3f25890c7037913be59902bae30654940c7417 Mon Sep 17 00:00:00 2001 From: Damian Myrda Date: Fri, 5 Jul 2024 15:47:05 -0500 Subject: [PATCH] Enforce read only --- compose.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/compose.yml b/compose.yml index 569b573..225ef0e 100644 --- a/compose.yml +++ b/compose.yml @@ -6,8 +6,8 @@ services: ports: - "443:443" volumes: - - /etc/letsencrypt/live/prime8.dev/fullchain.pem:/ssl/fullchain.pem - - /etc/letsencrypt/live/prime8.dev/privkey.pem:/ssl/privkey.pem + - /etc/letsencrypt/live/prime8.dev/fullchain.pem:/ssl/fullchain.pem:ro + - /etc/letsencrypt/live/prime8.dev/privkey.pem:/ssl/privkey.pem:ro restart: always stop_grace_period: 1m @@ -28,7 +28,7 @@ services: - mail:/state/:/var/mail-state/ - mail:/logs/:/var/log/mail/ - mail:/config/:/tmp/docker-mailserver/ - - /etc/letsencrypt/:/etc/letsencrypt/ + - /etc/letsencrypt/:/etc/letsencrypt/:ro cap_add: - NET_ADMIN healthcheck: -- 2.43.4