From 12a677f0ca88e5f12ecf2526c11c88a4eeaaae96 Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Sat, 22 Nov 2025 10:58:53 -0500
Subject: [PATCH] Change Docker socket volume to read-only

---
 apps/website/public/install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/website/public/install.sh b/apps/website/public/install.sh
index a97eb07..0792fde 100644
--- a/apps/website/public/install.sh
+++ b/apps/website/public/install.sh
@@ -185,7 +185,7 @@ install_dokploy() {
         --restart always \
         -v /etc/dokploy/traefik/traefik.yml:/etc/traefik/traefik.yml \
         -v /etc/dokploy/traefik/dynamic:/etc/dokploy/traefik/dynamic \
-        -v /var/run/docker.sock:/var/run/docker.sock \
+        -v /var/run/docker.sock:/var/run/docker.sock:ro \
         -p 80:80/tcp \
         -p 443:443/tcp \
         -p 443:443/udp \