From 3d885ad92f85da1e92ea1c5a48172ebb40efd59d Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 3 Dec 2025 23:47:29 +0000
Subject: [PATCH] Mark seed volume as read-only in docker-compose

---
 docker-compose.yml.example | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker-compose.yml.example b/docker-compose.yml.example
index 47a659a..ec2daa0 100644
--- a/docker-compose.yml.example
+++ b/docker-compose.yml.example
@@ -332,10 +332,10 @@ services:
     profiles:
       - seed
     volumes:
-      # Mount data directory for database
+      # Mount data directory for database (read-write)
       - ${DATA_HOME:-./data}:/data
-      # Mount seed directory for seed files
-      - ${SEED_HOME:-./seed}:/seed
+      # Mount seed directory for seed files (read-only)
+      - ${SEED_HOME:-./seed}:/seed:ro
     environment:
       - DATA_HOME=/data
       - SEED_HOME=/seed