also to be extra safe you can just mount your external images folder as read only by adding :ro to the docker volume mount so that the container won’t be able to modify anything as a precaution.

This is what I was thinking, too.

Alright, looks like I’ll be setting it up soon! LOL