diff --git a/docker-compose.yml b/docker-compose.yml
index 0efb7a8..a8e79ff 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,7 @@ services:
         ports:
             - "8550:8550"
         volumes:
-            - ./Caddyfile:/etc/caddy/Caddyfile
+            - ./Caddyfile:/etc/caddy/Caddyfile:ro,Z
             - caddy-data:/data
         environment:
             - PASTE_DOMAIN=${PASTE_DOMAIN}
@@ -17,7 +17,7 @@ services:
     privatebin:
         image: privatebin/nginx-fpm-alpine:stable
         volumes:
-            - ./privatebin.conf.php:/srv/cfg/conf.php:ro
+            - ./privatebin.conf.php:/srv/cfg/conf.php
             - privatebin-data:/srv/data
         labels:
             - traefik.enable=true
diff --git a/setup.sh b/setup.sh
index 3f9d532..e5ad57e 100644
--- a/setup.sh
+++ b/setup.sh
@@ -1,4 +1,4 @@
-cat > .env <<EOF
+cat >.env <<EOF
 LETSENCRYPT_EMAIL=ion606@protonmail.com
 ADMIN_EMAIL=ion606@protonmail.com
 PASTE_DOMAIN=bin.ion606.com
@@ -9,4 +9,7 @@ LUFI_SECRET=$(openssl rand -hex 32)
 SHLINK_DB_PASSWORD=$(openssl rand -hex 24)
 SHLINK_GEOLITE_KEY=YOUR_MAXMIND_KEY
 SHLINK_API_KEY=$(openssl rand -hex 32)
-EOF
\ No newline at end of file
+EOF
+
+sudo chmod 644 Caddyfile
+