diff --git a/containers/emerald/configuration.nix b/containers/emerald/configuration.nix
index 7f1f1fc..421ddb0 100644
--- a/containers/emerald/configuration.nix
+++ b/containers/emerald/configuration.nix
@@ -19,4 +19,5 @@
       MusicFolder = "/binds/music/main";
     };
   };
+  systemd.services.navidrome.serviceConfig.BindReadOnlyPaths = ["/binds/music"];
 }