Mount all volumes in nginx read-only

docs/install/docker/ipv6_plain/docker-compose.yml

@@ -42,8 +42,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ${MEDIA_FILES_DIR:-./mediafiles}:/media
+      - staticfiles:/static:ro
+      - ${MEDIA_FILES_DIR:-./mediafiles}:/media:ro
     networks:
       tandoor:
         ipv6_address: ${IPV6_PREFIX:?NO_IPV6_PREFIX}::4

docs/install/docker/nginx-proxy/docker-compose.yml

@@ -32,8 +32,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     networks:
       - default
       - nginx-proxy

docs/install/docker/plain/docker-compose.yml

@@ -30,8 +30,8 @@ services:
       - web_recipes
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
 
 volumes:
   nginx_config:

docs/install/docker/traefik-nginx/docker-compose.yml

@@ -30,8 +30,8 @@ services:
       - ./.env
     volumes:
       - nginx_config:/etc/nginx/conf.d:ro
-      - staticfiles:/static
-      - ./mediafiles:/media
+      - staticfiles:/static:ro
+      - ./mediafiles:/media:ro
     labels: # traefik example labels
       - "traefik.enable=true"
       - "traefik.http.routers.recipes.rule=Host(`recipes.mydomain.com`, `recipes.myotherdomain.com`)"
@@ -45,7 +45,7 @@ services:
 
 networks:
   default:
-  traefik: # This is you external traefik network
+  traefik: # This is your external traefik network
     external: true
 
 volumes: