diff --git a/docker/docker-compose/default/docker-compose.yml b/docker/docker-compose/default/docker-compose.yml
index d2e8b37e..cdacc76b 100644
--- a/docker/docker-compose/default/docker-compose.yml
+++ b/docker/docker-compose/default/docker-compose.yml
@@ -21,7 +21,7 @@ services:
     volumes:
       - "./pigallery2/config:/app/data/config" # CHANGE ME
       - "db-data:/app/data/db"
-      - "./pigallery2/images:/app/data/images" # CHANGE ME
+      - "./pigallery2/images:/app/data/images:ro" # CHANGE ME, ':ro' mean read-only
       - "./pigallery2/tmp:/app/data/tmp" # CHANGE ME
     expose:
       - "80"
diff --git a/docker/docker-compose/pigallery2-only/docker-compose.yml b/docker/docker-compose/pigallery2-only/docker-compose.yml
index 9799e40f..161487ea 100644
--- a/docker/docker-compose/pigallery2-only/docker-compose.yml
+++ b/docker/docker-compose/pigallery2-only/docker-compose.yml
@@ -8,7 +8,7 @@ services:
     volumes:
       - "./pigallery2/config:/app/data/config" # CHANGE ME
       - "db-data:/app/data/db"
-      - "./pigallery2/images:/app/data/images" # CHANGE ME
+      - "./pigallery2/images:/app/data/images:ro" # CHANGE ME, ':ro' mean read-only
       - "./pigallery2/tmp:/app/data/tmp" # CHANGE ME
     ports:
       - 80:80
diff --git a/docker/docker-compose/with-mysql/docker-compose.yml b/docker/docker-compose/with-mysql/docker-compose.yml
index d11bab38..d691dbfe 100644
--- a/docker/docker-compose/with-mysql/docker-compose.yml
+++ b/docker/docker-compose/with-mysql/docker-compose.yml
@@ -33,7 +33,7 @@ services:
     volumes:
       - "./pigallery2/config:/app/data/config" # CHANGE ME
       - "db-data:/app/data/db"
-      - "./pigallery2/images:/app/data/images" # CHANGE ME
+      - "./pigallery2/images:/app/data/images:ro" # CHANGE ME, ':ro' mean read-only
       - "./pigallery2/tmp:/app/data/tmp" # CHANGE ME
     expose:
       - "80"