diff --git a/roles/webserver/files/docker-compose.yml b/roles/webserver/files/docker-compose.yml
index 0794181..981b745 100644
--- a/roles/webserver/files/docker-compose.yml
+++ b/roles/webserver/files/docker-compose.yml
@@ -126,7 +126,7 @@ services:
       traefik.docker.network: traefik
       traefik.enable: ${MEDIAWIKI_WEB_ENABLED:-true}
     volumes:
-      - ./LocalSettings.php:/var/www/html/LocalSettings.php
+      - ./LocalSettings.php:/var/www/html/LocalSettings.php:ro,Z
       - mediawiki:/var/www/html/images
     networks:
       - traefik