diff --git a/kube/deploy/apps/code-server/ks.yaml b/kube/deploy/apps/code-server/ks.yaml
index 6d3301f9..cf341de4 100644
--- a/kube/deploy/apps/code-server/ks.yaml
+++ b/kube/deploy/apps/code-server/ks.yaml
@@ -39,6 +39,8 @@ spec:
       CACHESIZE: "6Gi"
       SC: &sc "block"
       SNAP: *sc
+      ACCESSMODE: &am "ReadWriteOnce"
+      SNAP_ACCESSMODE: *am
       RUID: &uid "1000"
       RGID: *uid
       RFSG: *uid
diff --git a/kube/deploy/apps/immich/ks.yaml b/kube/deploy/apps/immich/ks.yaml
index fc3237ff..df42d60d 100644
--- a/kube/deploy/apps/immich/ks.yaml
+++ b/kube/deploy/apps/immich/ks.yaml
@@ -37,6 +37,7 @@ spec:
       SC: &sc "file"
       SNAP: *sc
       ACCESSMODE: "ReadWriteMany"
+      SNAP_ACCESSMODE: "ReadOnlyMany"
       RUID: !!str &uid |
         ${APP_UID_IMMICH}
       RGID: !!str |
diff --git a/kube/deploy/apps/readeck/ks.yaml b/kube/deploy/apps/readeck/ks.yaml
index 5a03d71c..ffbd74b4 100644
--- a/kube/deploy/apps/readeck/ks.yaml
+++ b/kube/deploy/apps/readeck/ks.yaml
@@ -25,7 +25,10 @@ spec:
     substitute:
       PVC: "readeck-data"
       SIZE: "100Gi"
-      SC: "block"
+      SC: &sc "block"
+      SNAP: *sc
+      ACCESSMODE: &am "ReadWriteOnce"
+      SNAP_ACCESSMODE: *am
       RUID: &uid !!str |
         ${APP_UID_READECK}
       RGID: !!str |
diff --git a/kube/deploy/apps/thelounge/ks.yaml b/kube/deploy/apps/thelounge/ks.yaml
index 3e3396c4..daab653a 100644
--- a/kube/deploy/apps/thelounge/ks.yaml
+++ b/kube/deploy/apps/thelounge/ks.yaml
@@ -24,7 +24,10 @@ spec:
     substitute:
       PVC: "thelounge-data"
       SIZE: "10Gi"
-      SC: "block"
+      SC: &sc "block"
+      SNAP: *sc
+      ACCESSMODE: &am "ReadWriteOnce"
+      SNAP_ACCESSMODE: *am
       RUID: &uid !!str |
         ${APP_UID_THELOUNGE}
       RGID: !!str |
diff --git a/kube/deploy/vm/ad/ks.yaml b/kube/deploy/vm/ad/ks.yaml
index fa452742..883598f9 100644
--- a/kube/deploy/vm/ad/ks.yaml
+++ b/kube/deploy/vm/ad/ks.yaml
@@ -26,6 +26,10 @@ spec:
       PVC: "vm-ad-dc1-c-drive"
       SIZE: "105Gi"
       VOLUMEMODE: "Filesystem"
+      SC: &sc "block"
+      SNAP: *sc
+      ACCESSMODE: &am "ReadWriteOnce"
+      SNAP_ACCESSMODE: *am
       RUID: &uid "107"
       RGID: *uid
       RFSG: *uid
@@ -76,6 +80,10 @@ spec:
       PVC: "vm-ad-dc2-c-drive"
       SIZE: "105Gi"
       VOLUMEMODE: "Filesystem"
+      SC: &sc "block"
+      SNAP: *sc
+      ACCESSMODE: &am "ReadWriteOnce"
+      SNAP_ACCESSMODE: *am
       RUID: &uid "107"
       RGID: *uid
       RFSG: *uid