diff --git a/mastodon-container.nix b/mastodon-container.nix
index e0e18f0..82d8698 100644
--- a/mastodon-container.nix
+++ b/mastodon-container.nix
@@ -93,7 +93,7 @@ in {
                 "postgres-data:/var/lib/postgres/data"
                 "redis-data:/var/lib/redis"
                 "mastodon-data:/var/lib/mastodon"
-              ] ++ (map (env-file: "${env-file}:${env-file},ro")
+              ] ++ (map (env-file: "${env-file}:${env-file}:ro,Z")
                 cfg.environment-files);
               ports = [ "${toString cfg.port}:80" ];
             };