diff --git a/host-pottwal.yml b/host-pottwal.yml
index 5d683a0..921bf2f 100644
--- a/host-pottwal.yml
+++ b/host-pottwal.yml
@@ -186,7 +186,8 @@
           - 5222:5222   # xmpp-client
           - 5269:5269   # xmpp-server
         volumes:
-          - "{{ prosody_config_dir }}:/etc/prosody:rw"
+          - "{{ prosody_config_dir }}:/etc/prosody:ro"
+          - "{{ prosody_config_dir }}/certs:/etc/prosody/certs:rw"
           - "{{ prosody_data_dir }}/var/lib/prosody:/var/lib/prosody:rw"
           - "{{ prosody_data_dir }}/var/log/prosody:/var/log/prosody:rw"
           - "{{ dehydrated_certs_dir }}/{{ prosody_domain_name }}:/var/lib/dehydrated/certs/{{ prosody_domain_name }}:ro"