diff --git a/projects/firefly/docker-compose.yml b/projects/firefly/docker-compose.yml
index 2368f7c..6799b9b 100644
--- a/projects/firefly/docker-compose.yml
+++ b/projects/firefly/docker-compose.yml
@@ -12,7 +12,12 @@ services:
     labels:
       - rclone.storage=storagebox-crypt
     volumes:
-      - /opt/media/storagebox/firefly/upload:/var/www/html/storage/upload
+      - type: bind
+        source: /opt/media/storagebox/firefly/upload
+        target: /var/www/html/storage/upload
+        bind:
+          propagation: rslave
+          create_host_path: false
     healthcheck:
       test:
         [
diff --git a/projects/immich/docker-compose.yml b/projects/immich/docker-compose.yml
index 0c5f9fa..31c165e 100644
--- a/projects/immich/docker-compose.yml
+++ b/projects/immich/docker-compose.yml
@@ -9,7 +9,12 @@ services:
     labels:
       - rclone.storage=storagebox-crypt
     volumes:
-      - /opt/media/storagebox/immich/library:/usr/src/app/upload
+      - type: bind
+        source: /opt/media/storagebox/immich/library
+        target: /usr/src/app/upload
+        bind:
+          propagation: rslave
+          create_host_path: false
       - /etc/localtime:/etc/localtime:ro
     depends_on:
       immich-redis:
diff --git a/projects/mealie/docker-compose.yml b/projects/mealie/docker-compose.yml
index b27157c..12fa956 100644
--- a/projects/mealie/docker-compose.yml
+++ b/projects/mealie/docker-compose.yml
@@ -6,8 +6,15 @@ services:
         limits:
           cpus: "1.0"
           memory: 1G
+    labels:
+      - rclone.storage=storagebox-crypt
     volumes:
-      - /opt/media/storagebox/mealie:/app/data/
+      - type: bind
+        source: /opt/media/storagebox/mealie
+        target: /app/data/
+        bind:
+          propagation: rslave
+          create_host_path: false
     healthcheck:
       test:
         [
diff --git a/projects/n8n/docker-compose.yml b/projects/n8n/docker-compose.yml
index f22061f..c64290a 100644
--- a/projects/n8n/docker-compose.yml
+++ b/projects/n8n/docker-compose.yml
@@ -19,7 +19,13 @@ services:
       - N8N_SECURE_COOKIE=true
       - N8N_RESTRICT_FILE_ACCESS_TO=/home/node
     volumes:
-      - /opt/media/storagebox/paperless/consume:/home/node/paperless/consume:rw
+      - type: bind
+        source: /opt/media/storagebox/paperless/consume
+        target: /home/node/paperless/consume
+        read_only: false
+        bind:
+          propagation: rslave
+          create_host_path: false
       - n8n_data:/home/node/.n8n
     healthcheck:
       test:
diff --git a/projects/nextcloud/docker-compose.yml b/projects/nextcloud/docker-compose.yml
index 5cc6037..caee09f 100644
--- a/projects/nextcloud/docker-compose.yml
+++ b/projects/nextcloud/docker-compose.yml
@@ -13,7 +13,12 @@ services:
       - traefik.http.routers.nextcloud.middlewares=nextcloud-buffering
     volumes:
       - nextcloud_data:/var/www/html
-      - /opt/media/storagebox/nextcloud:/mnt/storagebox
+      - type: bind
+        source: /opt/media/storagebox/nextcloud
+        target: /mnt/storagebox
+        bind:
+          propagation: rslave
+          create_host_path: false
     healthcheck:
       test:
         [
diff --git a/projects/paperless/docker-compose.yml b/projects/paperless/docker-compose.yml
index b203b91..9d3b139 100644
--- a/projects/paperless/docker-compose.yml
+++ b/projects/paperless/docker-compose.yml
@@ -11,10 +11,30 @@ services:
     labels:
       - rclone.storage=storagebox-crypt
     volumes:
-      - /opt/media/storagebox/paperless/data:/usr/src/paperless/data
-      - /opt/media/storagebox/paperless/media:/usr/src/paperless/media
-      - /opt/media/storagebox/paperless/export:/usr/src/paperless/export
-      - /opt/media/storagebox/paperless/consume:/usr/src/paperless/consume
+      - type: bind
+        source: /opt/media/storagebox/paperless/data
+        target: /usr/src/paperless/data
+        bind:
+          propagation: rslave
+          create_host_path: false
+      - type: bind
+        source: /opt/media/storagebox/paperless/media
+        target: /usr/src/paperless/media
+        bind:
+          propagation: rslave
+          create_host_path: false
+      - type: bind
+        source: /opt/media/storagebox/paperless/export
+        target: /usr/src/paperless/export
+        bind:
+          propagation: rslave
+          create_host_path: false
+      - type: bind
+        source: /opt/media/storagebox/paperless/consume
+        target: /usr/src/paperless/consume
+        bind:
+          propagation: rslave
+          create_host_path: false
     environment:
       PAPERLESS_REDIS: ${PAPERLESS_REDIS}
       PAPERLESS_TIME_ZONE: ${PAPERLESS_TIME_ZONE}