diff --git a/docker-compose.yaml b/docker-compose.yaml
index cca865b..60a5b7c 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -11,10 +11,18 @@ services:
       - ./ssh-chat/motd:/motd:ro
       - ./ssh-chat/admins:/admins:ro
     command: "/usr/local/bin/ssh-chat --identity /run/secrets/chatkey --admin=/admins --log=/dev/stdout --motd=/motd"
+    read_only: true
+    deploy:
+      resources:
+        limits:
+          cpus: '0.1'
+          memory: '64M'
+          pids: 20
 
   matterbridge:
     build: https://gitea.demb.uk/third-party-mirrors/matterbridge.git#v1.26.0
     restart: unless-stopped
+    read_only: true
     user: nobody
     volumes:
       - ./matterbridge/matterbridge.toml:/etc/matterbridge/matterbridge.toml:ro
@@ -23,6 +31,13 @@ services:
     depends_on:
       - ssh-chat
 
+    deploy:
+      resources:
+        limits:
+          cpus: '0.1'
+          memory: '64M'
+          pids: 20
+
   ts3:
     image: docker.io/teamspeak:3.13.7
     restart: unless-stopped