diff --git a/roles/docker/tasks/pre_deploy/nodebb.yml b/roles/docker/tasks/pre_deploy/nodebb.yml
index 79d51db..a72e692 100644
--- a/roles/docker/tasks/pre_deploy/nodebb.yml
+++ b/roles/docker/tasks/pre_deploy/nodebb.yml
@@ -26,4 +26,4 @@
     src: nodebb/setup.json.j2
     dest: "{{ services.nodebb.volume_folder }}/setup.json"
     owner: root
-    mode: u=rw,g=r,o=r
+    mode: u=rw,go=
diff --git a/roles/docker/templates/compose-files/nodebb.yml.j2 b/roles/docker/templates/compose-files/nodebb.yml.j2
index 70ef1a7..07f4eb9 100644
--- a/roles/docker/templates/compose-files/nodebb.yml.j2
+++ b/roles/docker/templates/compose-files/nodebb.yml.j2
@@ -3,8 +3,8 @@ services:
     image: mongo:{{ services.nodebb.monogdb_version }}
     restart: always
     volumes:
-      - ./mongodb:/data/db
-      - ./mongodb-user-init.js:/docker-entrypoint-initdb.d/user-init.js
+      - ./mongodb:/data/db:rw
+      - ./mongodb-user-init.js:/docker-entrypoint-initdb.d/user-init.js:ro
     environment:
       MONGO_INITDB_ROOT_USERNAME: nodebb
       MONGO_INITDB_ROOT_PASSWORD: "{{ nodebb_secrets.mongodb_password }}"
@@ -17,9 +17,9 @@ services:
       - default
       - external_services
     volumes:
-      - ./nodebb-uploads:/usr/src/app/public/uploads
-      - ./nodebb-config:/opt/config
-      - ./setup.json:/usr/src/app/setup.json
+      - ./nodebb-uploads:/usr/src/app/public/uploads:rw
+      - ./nodebb-config:/opt/config:rw
+      - ./setup.json:/usr/src/app/setup.json:ro
     environment:
         VIRTUAL_HOST: "{{ services.nodebb.domain }}"
         VIRTUAL_PORT: 4567