diff --git a/Dockerfile b/Dockerfile
index 3bfec98..dfb7e95 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,8 @@
 # HOW TO:
 #
-# docker build -t porom:latest .
-#
-# Then run the container:
-#
 # docker compose up
 #
-# NOTE: not working yet. i get an error that the db is read-only :(
+# it exposes the data/ and secrets/ volumes in app root
 #
 FROM openresty/openresty:alpine-fat
 
diff --git a/start.sh b/start.sh
index ad6f35c..fdfbcba 100755
--- a/start.sh
+++ b/start.sh
@@ -15,6 +15,7 @@ first_launch() {
   touch "secrets/.touched.$LAPIS_ENVIRONMENT"
   mkdir -p data/db
   luajit schema.lua
+  chmod -R a+rw data
   lapis migrate
   luajit create_default_accounts.lua
 }