From 51a98bd0251093e441297c973d44d49ee3364a48 Mon Sep 17 00:00:00 2001
From: Ben Allfree <ben@benallfree.com>
Date: Fri, 3 Nov 2023 04:52:36 +0000
Subject: [PATCH] fix: make pockethost bind mount read-only

---
 src/services/PocketBaseService/index.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/services/PocketBaseService/index.ts b/src/services/PocketBaseService/index.ts
index 742aa10f..f9bae553 100644
--- a/src/services/PocketBaseService/index.ts
+++ b/src/services/PocketBaseService/index.ts
@@ -159,7 +159,7 @@ export const createPocketbaseService = async (
           '8090/tcp': [{ HostPort: `${port}` }],
         },
         Binds: [
-          `${dirname(binPath)}:/host_bin`,
+          `${dirname(binPath)}:/host_bin:ro`,
           `${mkInstanceDataPath(slug)}:/host_data`,
           `${
             isMothership