From 2c69028fe1c20b80808e1e8ea2e1189dfab1a1cc Mon Sep 17 00:00:00 2001
From: Torben Brenner <t.brenner@dkfz-heidelberg.de>
Date: Wed, 8 Mar 2023 09:46:51 +0100
Subject: [PATCH] Make Custom Certs Directory read-only

---
 ccp/nngm-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ccp/nngm-compose.yml b/ccp/nngm-compose.yml
index 1f4cb73..6293707 100644
--- a/ccp/nngm-compose.yml
+++ b/ccp/nngm-compose.yml
@@ -17,7 +17,7 @@ services:
       - "traefik.http.services.connector.loadbalancer.server.port=8080"
       - "traefik.http.routers.connector.tls=true"
     volumes:
-      - /etc/bridgehead/trusted-ca-certs:/custom-certs
+      - /etc/bridgehead/trusted-ca-certs:/custom-certs:ro
 
   connector_db:
     image: postgres:9.5-alpine