diff --git a/setup/nextcloud.sh b/setup/nextcloud.sh
index ae12cccd..a90a8ed6 100755
--- a/setup/nextcloud.sh
+++ b/setup/nextcloud.sh
@@ -326,7 +326,7 @@ php <<EOF > $CONFIG_TEMP && mv $CONFIG_TEMP $STORAGE_ROOT/owncloud/config.php;
 <?php
 include("$STORAGE_ROOT/owncloud/config.php");
 
-\$CONFIG['config_is_read_only'] = false; # should prevent warnings from occ tool but doesn't
+\$CONFIG['config_is_read_only'] = true; # should prevent warnings from occ tool but doesn't
 
 \$CONFIG['trusted_domains'] = array('$PRIMARY_HOSTNAME');
 
diff --git a/setup/system.sh b/setup/system.sh
index 4a43e616..b2ee6f67 100755
--- a/setup/system.sh
+++ b/setup/system.sh
@@ -336,6 +336,9 @@ fi #NODOC
 # remove bind9 in case it is still there
 apt-get purge -qq -y bind9 bind9-utils
 
+# Install unbound and dns utils (e.g. dig)
+apt_install unbound python3-unbound bind9-dnsutils
+
 # Configure unbound
 cp -f conf/unbound.conf /etc/unbound/unbound.conf.d/miabunbound.conf
 
@@ -343,8 +346,7 @@ if [ ! -d /etc/unbound/lists.d ]; then
 	mkdir /etc/unbound/lists.d
 fi
 
-# Install unbound and dns utils (e.g. dig)
-apt_install unbound python3-unbound bind9-dnsutils
+systemctl restart unbound
 
 unbound-control -q status