From 287cccf6cb53db6c7bb4dac01e9a24f3dc62847b Mon Sep 17 00:00:00 2001
From: Kevin Veen-Birkenbach <kevin@veen.world>
Date: Wed, 26 Nov 2025 14:36:40 +0100
Subject: [PATCH] Made /etc/msmtprc volume for wordpress read only

---
 roles/web-app-wordpress/templates/docker-compose.yml.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/web-app-wordpress/templates/docker-compose.yml.j2 b/roles/web-app-wordpress/templates/docker-compose.yml.j2
index 0f2edc98..f9e6770d 100644
--- a/roles/web-app-wordpress/templates/docker-compose.yml.j2
+++ b/roles/web-app-wordpress/templates/docker-compose.yml.j2
@@ -8,7 +8,7 @@
       - "127.0.0.1:{{ ports.localhost.http[application_id] }}:80"
     volumes:
       - data:{{ WORDPRESS_DOCKER_HTML_PATH }}
-      - {{ WORDPRESS_MSMTP_ABS }}:/etc/msmtprc
+      - {{ WORDPRESS_MSMTP_ABS }}:/etc/msmtprc:ro
 
 {% include 'roles/docker-container/templates/healthcheck/msmtp_curl.yml.j2' %}
 {% include 'roles/docker-container/templates/depends_on/dmbs_excl.yml.j2' %}