From a9befa0359acb4dded18cae6cd1dbde381be6fc3 Mon Sep 17 00:00:00 2001
From: Simon L <szaimen@e.mail.de>
Date: Wed, 7 Jun 2023 16:42:09 +0200
Subject: [PATCH] make borgbackup container read_only

Signed-off-by: Simon L <szaimen@e.mail.de>
---
 php/containers.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/php/containers.json b/php/containers.json
index f72fb3f2..42424f5d 100644
--- a/php/containers.json
+++ b/php/containers.json
@@ -374,7 +374,8 @@
       "cap_add": [
         "SYS_ADMIN"
       ],
-      "apparmor_unconfined": true
+      "apparmor_unconfined": true,
+      "read_only": true
     },
     {
       "container_name": "nextcloud-aio-watchtower",