From 3d90099476ae773bc6494c3967b515543936de1b Mon Sep 17 00:00:00 2001
From: Mauricio Siu <47042324+Siumauricio@users.noreply.github.com>
Date: Sat, 22 Nov 2025 10:59:09 -0500
Subject: [PATCH] Make Docker socket volume read-only

Changed Docker socket volume to read-only.
---
 apps/website/public/feature.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/website/public/feature.sh b/apps/website/public/feature.sh
index 6daada9..112cb5e 100644
--- a/apps/website/public/feature.sh
+++ b/apps/website/public/feature.sh
@@ -158,7 +158,7 @@ install_dokploy() {
     --restart always \
     -v /etc/dokploy/traefik/traefik.yml:/etc/traefik/traefik.yml \
     -v /etc/dokploy/traefik/dynamic:/etc/dokploy/traefik/dynamic \
-    -v /var/run/docker.sock:/var/run/docker.sock \
+    -v /var/run/docker.sock:/var/run/docker.sock:ro \
     -p 80:80/tcp \
     -p 443:443/tcp \
     -p 443:443/udp \