diff --git a/roles/immich/templates/docker-compose.yml b/roles/immich/templates/docker-compose.yml
index 9e5207c..de4298a 100644
--- a/roles/immich/templates/docker-compose.yml
+++ b/roles/immich/templates/docker-compose.yml
@@ -28,7 +28,7 @@ services:
       - ${UPLOAD_LOCATION}:/usr/src/app/upload
       - /etc/localtime:/etc/localtime:ro
       - "{{ immich_data_dir }}/config.json:${IMMICH_CONIG_FILE}"
-      - /mnt/photosarchive:/mnt/photosarchive
+      - /mnt/photosarchive:/mnt/photosarchive:ro
     env_file:
       - .env
     depends_on:
diff --git a/roles/photos_archive/templates/mnt-photosarchive.mount b/roles/photos_archive/templates/mnt-photosarchive.mount
index 7691162..64b082b 100644
--- a/roles/photos_archive/templates/mnt-photosarchive.mount
+++ b/roles/photos_archive/templates/mnt-photosarchive.mount
@@ -7,4 +7,4 @@ Wants=network-online.target
 What=//SNEETCH/Pictures
 Where=/mnt/photosarchive
 Type=cifs
-Options=username={{ photos_archive_user }},password={{ photos_archive_password }},workgroup=WORKGROUP,uid={{ users.worker }},gid={{ users.worker }},iocharset=utf8,file_mode=0600,dir_mode=0700
+Options=ro,username={{ photos_archive_user }},password={{ photos_archive_password }},workgroup=WORKGROUP,uid={{ users.worker }},gid={{ users.worker }},iocharset=utf8,file_mode=0600,dir_mode=0700