diff --git a/.github/workflows/sitectl-create-smoke-test.yaml b/.github/workflows/sitectl-create-smoke-test.yaml
index 3a7dca5..ff0c249 100644
--- a/.github/workflows/sitectl-create-smoke-test.yaml
+++ b/.github/workflows/sitectl-create-smoke-test.yaml
@@ -27,6 +27,6 @@ jobs:
       create-definition: ${{ matrix.create_definition }}
       create-args: ${{ matrix.create_args }}
       packages: sitectl sitectl-drupal
-      package-versions: sitectl=1.8.1 sitectl-drupal=1.3.0
+      package-versions: sitectl=1.8.2 sitectl-drupal=1.3.0
       allow-unversioned-packages: false
       run-verify: true
diff --git a/README.md b/README.md
index 69acaf6..26de41e 100644
--- a/README.md
+++ b/README.md
@@ -30,7 +30,7 @@ The site is served through Traefik at `http://localhost`. The first boot install
 
 ## Local image build
 
-The `drupal` service builds this checkout on top of the LibOps Drupal base image. The Dockerfile copies Composer lockfiles and assets before local modules, themes, config, and rootfs additions so Docker can reuse dependency layers when only site customizations change. Local builds use the platform selected by the Docker CLI and do not push images.
+The `drupal` service builds this checkout on top of the LibOps Drupal base image. The Dockerfile copies Composer lockfiles and assets before local modules, themes, config, and rootfs additions so Docker can reuse dependency layers when only site customizations change. Checked-in Drupal configuration is copied into the image instead of mounted writable at runtime; rebuild after changing it. This keeps hosted preview containers from changing their deployment checkout. Local builds use the platform selected by the Docker CLI and do not push images.
 
 Docker Compose derives the project name from the checkout directory, so independent forks do not share containers, networks, or named volumes by default. Set `COMPOSE_PROJECT_NAME` explicitly when a stable name is required. If an existing checkout previously relied on this template's fixed `drupal` project name, set `COMPOSE_PROJECT_NAME=drupal` before starting it to keep using its existing named volumes, or migrate those volumes deliberately.
 
diff --git a/compose.yaml b/compose.yaml
index 8ee62a8..f0ce307 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -103,7 +103,6 @@ services:
         target: /var/www/drupal/private
         read_only: false
       - drupal-solr-config:/opt/solr/server/solr/default:z,rw
-      - ./config:/var/www/drupal/config:z,rw
 
   database-init:
     image: libops/base:3.2.2.0@sha256:851e17742b5fee57038855f46b1a46d2716c0012c5f3a4788b7e5c7bc12fed5e