From 6ea6c43da494b521a3249b416cef09fa92001492 Mon Sep 17 00:00:00 2001
From: Pierre Jaury <pierre@jaury.eu>
Date: Sun, 24 Apr 2016 18:04:12 +0200
Subject: [PATCH] Make the docker socket mount read-only

---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index c6be7de3..b4fb24e7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -52,7 +52,7 @@ services:
     env_file: freeposte.env
     volumes:
       - /data/freeposte:/data
-      - /var/run/docker.sock:/tmp/docker.sock
+      - /var/run/docker.sock:/tmp/docker.sock:ro
 
   webmail:
     build: roundcube