Use a read-only root filesystem in service containers

This commit is contained in:
Ohad Livne 2025-12-24 20:13:30 +02:00
parent 0df3008fa0
commit 9ee480b959
Signed by: libohad-dev
GPG key ID: 34FDC68B51191A4D
2 changed files with 2 additions and 0 deletions

View file

@ -11,6 +11,7 @@ Network=private
PublishPort=51413:51413
PublishPort=51413:51413/udp
PublishPort=9091:9091
ReadOnly=true
UserNS=keep-id
Volume=%h/.config/transmission:/config:Z
Volume=%h/Downloads/transmission/watch:/watch:ro,Z