diff --git a/.gitignore b/.gitignore
index 2ae848a..6d37e16 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,20 +1,14 @@
 # Ignore everything in the volumes directory
 volumes/*
 
-# Unignore directories leading to seahub_settings.py
-!volumes/seafile-data/
-!volumes/seafile-data/seafile/
-!volumes/seafile-data/seafile/conf/
-
-# Unignore seahub_settings.py
+# Allow tracking of seahub_settings.py specifically
 !volumes/seafile-data/seafile/conf/seahub_settings.py
 
-# Ignore contents of seafile-data except for seahub_settings.py
+# Ignore everything in seafile-data except the specific path to seahub_settings.py
 volumes/seafile-data/*
 !volumes/seafile-data/seafile/
 !volumes/seafile-data/seafile/conf/
-!volumes/seafile-data/seafile/conf/seahub_settings.py
 
-# Keep seafile-mariadb and seafile-memcached directories but ignore their contents
+# Ignore everything else in seafile-mariadb and seafile-memcached directories
 volumes/seafile-mariadb/*
 volumes/seafile-memcached/*
diff --git a/docker-compose.yml b/docker-compose.yml
index 2458090..11968ca 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,7 +6,7 @@ services:
     restart: "on-failure"
     volumes:
       - ./volumes/seafile-data:/shared
-      - ./volumes/seafile-data/seafile/conf/seahub_settings.py:/shared/seafile/conf/seahub_settings.py
+      - ./volumes/seafile-data/seafile/conf/seahub_settings.py:/shared/seafile/conf/seahub_settings.py:ro
     environment:
       - DB_HOST=seafile-mariadb
       - DB_ROOT_PASSWD=Fk%Bysffpw5ob2t@