From 3173352222134d3baf4a0188ca9e57427b611b43 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Sat, 1 Apr 2023 19:52:01 +0000
Subject: [PATCH] homeassistant: Change dbus volume to read-only

---
 .../homeassistant/templates/homeassistant-container.service.j2  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/homeassistant/templates/homeassistant-container.service.j2 b/roles/homeassistant/templates/homeassistant-container.service.j2
index 433490a..8c83714 100644
--- a/roles/homeassistant/templates/homeassistant-container.service.j2
+++ b/roles/homeassistant/templates/homeassistant-container.service.j2
@@ -10,7 +10,7 @@ ExecStart=/usr/bin/podman run \
     --name homeassistant \
     --env TZ=Europe/Helsinki \
     --userns keep-id \
-    --volume /run/dbus:/run/dbus:rw \
+    --volume /run/dbus:/run/dbus:ro \
     --volume /srv/homeassistant:/config:rw \
     docker.io/homeassistant/home-assistant:{{ homeassistant_version }}
 ExecStop=/usr/bin/podman stop --ignore homeassistant