diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index b052e10..a2d464c 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -7,9 +7,8 @@ services:
         networks:
             bfile:
         volumes:
-            - './filed:/opt/code'
-            - './filed/config:/etc/filed'
-            - '/opt/code/target'
+            - './filed:/config:ro'
+            - './filed/config:/etc/filed:ro'
             - './volatile/files:/opt/user_uploads'
     janitord:
         build:
@@ -18,7 +17,7 @@ services:
         networks:
             bfile:
         volumes:
-            - './janitor:/opt/code'
+            - './janitor:/config:ro'
             - './volatile/files:/opt/user_uploads'
     caddy:
         image: caddy:alpine
diff --git a/filed/Dockerfile.prod b/filed/Dockerfile.prod
index 88c6bdb..f67f2e6 100644
--- a/filed/Dockerfile.prod
+++ b/filed/Dockerfile.prod
@@ -13,5 +13,8 @@ RUN strip target/release/filed && upx --best target/release/filed
 # --- deploy ---
 FROM busybox:musl
 
+RUN mkdir /config
+WORKDIR /config
+
 COPY --from=builder /opt/build/target/release/filed /bin/filed
 CMD [ "/bin/filed" ]
diff --git a/janitor/Dockerfile.prod b/janitor/Dockerfile.prod
index fbd4949..9eab590 100644
--- a/janitor/Dockerfile.prod
+++ b/janitor/Dockerfile.prod
@@ -12,5 +12,8 @@ RUN strip target/release/janitor && upx --best target/release/janitor
 # --- deploy ---
 FROM busybox:musl
 
+RUN mkdir /config
+WORKDIR /config
+
 COPY --from=builder /opt/build/target/release/janitor /bin/janitor
 CMD [ "/bin/janitor" ]