diff --git a/deploy/compose.yml b/deploy/compose.yml
index 35ae96d..ebf59f3 100644
--- a/deploy/compose.yml
+++ b/deploy/compose.yml
@@ -5,10 +5,17 @@ services:
     build:
       context: ./app
       args:
+        # app URLs
+        WEBSITE_APP_URL_CLEAR: "http://localhost:7001"
+        WEBSITE_APP_URL_ONION: ""
+        WEBSITE_APP_URL_I2P: ""
+        # API URLs
+        WEBSITE_API_URL_CLEAR: "http://localhost:7002"
+        WEBSITE_API_URL_ONION: ""
+        WEBSITE_API_URL_I2P: ""
+        # other
         WEBSITE_SOURCE_URL: "http://github.com/ngn13/website"
         WEBSITE_REPORT_URL: "http://github.com/ngn13/website/issues"
-        WEBSITE_APP_URL: "http://localhost:7001"
-        WEBSITE_API_URL: "http://localhost:7002"
         WEBSITE_DOC_URL: "http://doc:7003"
     security_opt:
       - "no-new-privileges:true"
@@ -16,10 +23,11 @@ services:
       - ALL
     ports:
       - "127.0.0.1:7001:7001"
-    restart: unless-stopped
     depends_on:
       - api
       - doc
+    read_only: true
+    restart: unless-stopped
 
   api:
     container_name: "website_api"
@@ -34,28 +42,28 @@ services:
       - "127.0.0.1:7002:7002"
     volumes:
       - ./data.db:/api/data.db:rw
-    restart: unless-stopped
     environment:
       WEBSITE_DEBUG: "false"
-      WEBSITE_APP_URL: "http://localhost:7001/"
+      WEBSITE_APP_URL_CLEAR: "http://localhost:7001/"
       WEBSITE_PASSWORD: "change_me"
       WEBSITE_HOST: "0.0.0.0:7002"
       WEBSITE_IP_HEADER: "X-Real-IP"
       WEBSITE_INTERVAL: "1h"
       WEBSITE_TIMEOUT: "15s"
       WEBSITE_LIMIT: "5s"
+    restart: unless-stopped
 
   doc:
     container_name: "website_doc"
     image: website_doc
-    read_only: true
     build:
       context: ./doc
     security_opt:
       - "no-new-privileges:true"
     cap_drop:
       - ALL
-    restart: unless-stopped
     environment:
       WEBSITE_HOST: "0.0.0.0:7003"
       WEBSITE_DOCS_DIR: "./docs"
+    read_only: true
+    restart: unless-stopped