diff --git a/docs/install/docker/ipv6_plain/docker-compose.yml b/docs/install/docker/ipv6_plain/docker-compose.yml
index a65c54f7..c56a8425 100644
--- a/docs/install/docker/ipv6_plain/docker-compose.yml
+++ b/docs/install/docker/ipv6_plain/docker-compose.yml
@@ -42,8 +42,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ${MEDIA_FILES_DIR:-./mediafiles}:/media
+      - staticfiles:/static:ro
+      - ${MEDIA_FILES_DIR:-./mediafiles}:/media:ro
     networks:
       tandoor:
         ipv6_address: ${IPV6_PREFIX:?NO_IPV6_PREFIX}::4
diff --git a/docs/install/docker/nginx-proxy/docker-compose.yml b/docs/install/docker/nginx-proxy/docker-compose.yml
index efb58028..51abb797 100644
--- a/docs/install/docker/nginx-proxy/docker-compose.yml
+++ b/docs/install/docker/nginx-proxy/docker-compose.yml
@@ -33,8 +33,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     networks:
       - default
       - nginx-proxy
diff --git a/docs/install/docker/plain/docker-compose.yml b/docs/install/docker/plain/docker-compose.yml
index b14602a8..2a3b7c3f 100644
--- a/docs/install/docker/plain/docker-compose.yml
+++ b/docs/install/docker/plain/docker-compose.yml
@@ -31,8 +31,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
 
 volumes:
   nginx_config:
diff --git a/docs/install/docker/traefik-nginx/docker-compose.yml b/docs/install/docker/traefik-nginx/docker-compose.yml
index a375fda7..da4817d0 100644
--- a/docs/install/docker/traefik-nginx/docker-compose.yml
+++ b/docs/install/docker/traefik-nginx/docker-compose.yml
@@ -31,8 +31,8 @@ services:
       - ./.env
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     labels: # traefik example labels
       - "traefik.enable=true"
       - "traefik.http.routers.recipes.rule=Host(`recipes.mydomain.com`, `recipes.myotherdomain.com`)"
@@ -46,7 +46,7 @@ services:
 
 networks:
   default:
-  traefik: # This is you external traefik network
+  traefik: # This is your external traefik network
     external: true
 
 volumes: