diff --git a/docker-compose.yml b/docker-compose.yml
index 539ee7a..11afa50 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -57,6 +57,9 @@ services:
     restart: unless-stopped
     volumes:
       - ./web:/usr/share/nginx/html:ro
+      # data/ stays writable so the release workflow can refresh deploy.json
+      # (the rest of the docroot is read-only)
+      - ./web/data:/usr/share/nginx/html/data
       - ./web/nginx.conf:/etc/nginx/conf.d/default.conf:ro
     ports:
       - "3200:80"     # Web (xetup.x9.cz via reverse proxy)