make /site RO and update to NFS4.2

Signed-off-by: Jason Cameron <git@jasoncameron.dev>

automation/playbooks/initialize_worker.yml

@@ -74,7 +74,7 @@
         src: 10.137.0.5:/var/share
         state: mounted
         fstype: nfs4
-        opts: 'auto,nofail,noatime,nolock,intr,tcp,actimeo=1800,nfsvers=4.1,rw'
+        opts: 'auto,nofail,noatime,nolock,intr,tcp,actimeo=1800,nfsvers=4.2,rw'
 
     - name: Ensure /var/share and its subdirectories exist with correct permissions
       shell: |

dmoj/docker-stack.yml

@@ -44,7 +44,7 @@ services:
       - /var/share/media:/media/
       - /var/share/problems:/problems/
       - /var/share/logs:/logs/
-      - /site/:/site/
+      - /site/:/site/:ro
       - /var/share/configs/wlmoj/local_settings.py:/site/dmoj/local_settings.py:ro
     working_dir: /site/
     env_file: [ environment/mysql.env, environment/site.env ]
@@ -70,7 +70,7 @@ services:
       - /var/share/cache/pdfcache:/pdfcache/
       - /var/share/cache/datacache:/datacache/
       - /var/share/logs:/logs/
-      - /site/:/site/
+      - /site/:/site/:ro
       - /var/share/configs/wlmoj/local_settings.py:/site/dmoj/local_settings.py:ro
     working_dir: /site/
     env_file: [ environment/mysql.env, environment/site.env ]
@@ -94,7 +94,7 @@ services:
       - /var/share/cache/pdfcache:/pdfcache/
       - /var/share/problems/:/problems/
       - /var/share/logs:/logs/
-      - /site/:/site/
+      - /site/:/site/:ro
       - /var/share/configs/wlmoj/local_settings.py:/site/dmoj/local_settings.py:ro
     working_dir: /site/
     env_file: [ environment/mysql.env, environment/site.env ]
@@ -115,7 +115,7 @@ services:
     init: true
     user: "root:9889"
     volumes:
-      - /site/:/app/site/
+      - /site/:/app/site/:ro
     working_dir: /app/site
     env_file: [ environment/mysql.env, environment/site.env ]
     networks: