From 1dad0af755eb8fa6ebc681c6fb87537dec322aee Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Mon, 2 Oct 2023 10:56:39 -0700
Subject: [PATCH] Add a couple read-only clauses

---
 mail-server.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mail-server.nix b/mail-server.nix
index 626ed2c..599c2d5 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -337,10 +337,10 @@ in {
               volumes = [
                 "${cfg.state-directory}/dovecot:/state"
                 "${hostSecrets.dovecotLdapConfig.target-file}:/run/dovecot2/conf.d/ldap.conf:ro"
-                "${cfg.imap.ssl-directory}:/run/certs/imap"
+                "${cfg.imap.ssl-directory}:/run/certs/imap:ro"
                 "${cfg.state-directory}/dovecot-dhparams:/var/lib/dhparams"
                 "${cfg.state-directory}/mail:/mail"
-                "${hostSecrets.dovecotSssdEnv.target-file}:/run/dovecot-secrets/sssd.env"
+                "${hostSecrets.dovecotSssdEnv.target-file}:/run/dovecot-secrets/sssd.env:ro"
               ];
               depends_on = [ "antispam" "ldap-proxy" ];
             };