From c3c697f4a8f7cd8a704258494a32ba281db4f788 Mon Sep 17 00:00:00 2001
From: Daniel Schulz <schulz.daniel@outlook.com>
Date: Sun, 10 Apr 2022 20:39:51 +0200
Subject: [PATCH] Mount all volumes in nginx read-only

---
 docs/install/docker/ipv6_plain/docker-compose.yml    | 4 ++--
 docs/install/docker/nginx-proxy/docker-compose.yml   | 4 ++--
 docs/install/docker/plain/docker-compose.yml         | 4 ++--
 docs/install/docker/traefik-nginx/docker-compose.yml | 6 +++---
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/docs/install/docker/ipv6_plain/docker-compose.yml b/docs/install/docker/ipv6_plain/docker-compose.yml
index a65c54f72..c56a84252 100644
--- a/docs/install/docker/ipv6_plain/docker-compose.yml
+++ b/docs/install/docker/ipv6_plain/docker-compose.yml
@@ -42,8 +42,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ${MEDIA_FILES_DIR:-./mediafiles}:/media
+      - staticfiles:/static:ro
+      - ${MEDIA_FILES_DIR:-./mediafiles}:/media:ro
     networks:
       tandoor:
         ipv6_address: ${IPV6_PREFIX:?NO_IPV6_PREFIX}::4
diff --git a/docs/install/docker/nginx-proxy/docker-compose.yml b/docs/install/docker/nginx-proxy/docker-compose.yml
index 5c6ba87ac..ffe1bf864 100644
--- a/docs/install/docker/nginx-proxy/docker-compose.yml
+++ b/docs/install/docker/nginx-proxy/docker-compose.yml
@@ -32,8 +32,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     networks:
       - default
       - nginx-proxy
diff --git a/docs/install/docker/plain/docker-compose.yml b/docs/install/docker/plain/docker-compose.yml
index 79ce307da..8bb5adbe1 100644
--- a/docs/install/docker/plain/docker-compose.yml
+++ b/docs/install/docker/plain/docker-compose.yml
@@ -30,8 +30,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
 
 volumes:
   nginx_config:
diff --git a/docs/install/docker/traefik-nginx/docker-compose.yml b/docs/install/docker/traefik-nginx/docker-compose.yml
index fa5dae780..0faa764bf 100644
--- a/docs/install/docker/traefik-nginx/docker-compose.yml
+++ b/docs/install/docker/traefik-nginx/docker-compose.yml
@@ -30,8 +30,8 @@ services:
       - ./.env
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     labels: # traefik example labels
       - "traefik.enable=true"
       - "traefik.http.routers.recipes.rule=Host(`recipes.mydomain.com`, `recipes.myotherdomain.com`)"
@@ -45,7 +45,7 @@ services:
 
 networks:
   default:
-  traefik: # This is you external traefik network
+  traefik: # This is your external traefik network
     external: true
 
 volumes: