From 2a4bf3b5dd2188bc6c538b58de84a9449fbb40ce Mon Sep 17 00:00:00 2001
From: Arunan Balasubramaniam <foss@abala.me>
Date: Sun, 18 Aug 2024 19:26:43 +0100
Subject: [PATCH] Navidrome: only give Navidrome read-only access to /media as
 it doesn't need write permissions

See https://www.navidrome.org/docs/usage/security/ .
---
 navidrome/config.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/navidrome/config.json b/navidrome/config.json
index d90435c3a..d22de3f49 100644
--- a/navidrome/config.json
+++ b/navidrome/config.json
@@ -9,7 +9,7 @@
   "init": false,
   "map": [
     "addon_config:rw",
-    "media:rw",
+    "media",
     "share:rw",
     "ssl:rw"
   ],