diff --git a/hosts/heather/arion-compose.nix b/hosts/heather/arion-compose.nix
index cbc7128..03183db 100644
--- a/hosts/heather/arion-compose.nix
+++ b/hosts/heather/arion-compose.nix
@@ -146,7 +146,7 @@
     # Repo: https://github.com/jitsi/docker-jitsi-meet (release stable-11031)
     # Minimal stack: web/prosody/jicofo/jvb. No coturn/jigasi/jibri.
     #   - Images: jitsi/* (docker hub; GHCR ghcr.io/jitsi/* not accessible)
-    #   - read_only + tmpfs per official compose
+    #   - read_only + tmpfs from official compose NOT supported by arion schema (skipped)
     #   - Named volumes (config + prosody data separate)
     #   - Reverse proxy: DISABLE_HTTPS=1, Caddy terminates TLS
     #   - JVB_ADVERTISE_IPS=51.250.45.111, :10000/udp public
@@ -157,11 +157,6 @@
       service.image = "jitsi/web:stable-11031";
       service.container_name = "jitsi-web";
       service.restart = "unless-stopped";
-      service.read_only = true;
-      service.tmpfs = [
-        "/run:size=16M,mode=1750,exec"
-        "/tmp:size=16M,mode=1777,noexec"
-      ];
       service.ports = [ "127.0.0.1:8000:80" ];
       service.volumes = [
         "jitsi-web-config:/config"
@@ -191,11 +186,6 @@
       service.image = "jitsi/prosody:stable-11031";
       service.container_name = "jitsi-prosody";
       service.restart = "unless-stopped";
-      service.read_only = true;
-      service.tmpfs = [
-        "/run:size=16M,mode=1750,exec"
-        "/tmp:size=16M,mode=1777,noexec"
-      ];
       service.expose = [ "5222" "5269" "5347" "5280" ];
       service.volumes = [
         "jitsi-prosody-config:/config"
@@ -217,11 +207,6 @@
       service.image = "jitsi/jicofo:stable-11031";
       service.container_name = "jitsi-jicofo";
       service.restart = "unless-stopped";
-      service.read_only = true;
-      service.tmpfs = [
-        "/run:size=16M,mode=1750,exec"
-        "/tmp:size=16M,mode=1777,noexec"
-      ];
       service.ports = [ "127.0.0.1:8888:8888" ];
       service.volumes = [ "jitsi-jicofo-config:/config" ];
       service.depends_on = [ "jitsi-prosody" ];
@@ -238,11 +223,6 @@
       service.image = "jitsi/jvb:stable-11031";
       service.container_name = "jitsi-jvb";
       service.restart = "unless-stopped";
-      service.read_only = true;
-      service.tmpfs = [
-        "/run:size=16M,mode=1750,exec"
-        "/tmp:size=16M,mode=1777,noexec"
-      ];
       service.ports = [
         "10000:10000/udp"
         "127.0.0.1:8080:8080"