diff --git a/.envs/.local/.django b/.envs/.local/.django
index b1b81839..e7dc3102 100755
--- a/.envs/.local/.django
+++ b/.envs/.local/.django
@@ -7,6 +7,14 @@ IPYTHONDIR=/app/.ipython
 # ------------------------------------------------------------------------------
 ALLOWED_HOSTS=*
 
+# Smtp
+# ------------------------------------------------------------------------------
+EMAIL_HOST=mailpit
+EMAIL_PORT=1025
+EMAIL_USE_TLS=False
+EMAIL_HOST_USER=
+EMAIL_HOST_PASSWORD=
+
 # Redis
 # ------------------------------------------------------------------------------
 REDIS_URL=redis://redis:6379/0
diff --git a/compose/local/dask/Dockerfile b/compose/local/dask/Dockerfile
index 3eb103c2..ae445f63 100644
--- a/compose/local/dask/Dockerfile
+++ b/compose/local/dask/Dockerfile
@@ -1,6 +1,5 @@
-FROM daskdev/dask:dev-py3.12
+FROM daskdev/dask:2024.2.1-py3.12
 ENV DEBIAN_FRONTEND noninteractive
-RUN echo "export VIRTUAL_ENV=`python -c 'import sys; print(sys.prefix)'`" >> /envfile
 
 ARG local_folder=/uploads
 
@@ -48,7 +47,7 @@ RUN python setup.py build \
 # Workers should have similar reqs as django
 WORKDIR /
 COPY ./requirements /requirements
-RUN . /envfile && pip install uv==0.1.7 && uv pip install --no-cache -r /requirements/base.txt
+RUN pip install uv==0.1.12 && uv pip install --system --no-cache -r /requirements/base.txt
 
 COPY ./compose/local/dask/prepare.sh /usr/bin/prepare.sh
 RUN chmod +x /usr/bin/prepare.sh
diff --git a/compose/local/django/Dockerfile b/compose/local/django/Dockerfile
index 4830290d..f47e5a21 100644
--- a/compose/local/django/Dockerfile
+++ b/compose/local/django/Dockerfile
@@ -3,7 +3,6 @@ FROM python:3.12-slim-bookworm as common-base
 ENV DJANGO_SETTINGS_MODULE config.settings.local
 ENV PYTHONUNBUFFERED 1
 ENV PYTHONDONTWRITEBYTECODE 1
-RUN echo "export VIRTUAL_ENV=`python -c 'import sys; print(sys.prefix)'`" >> /envfile
 
 ARG local_folder=/uploads
 
@@ -66,7 +65,7 @@ RUN /usr/local/go/bin/go build
 FROM common-base
 WORKDIR /
 COPY ./requirements /requirements
-RUN . /envfile && pip install uv==0.1.7 && uv pip install --no-cache -r /requirements/base.txt
+RUN pip install uv==0.1.12 && uv pip install --no-cache --system -r /requirements/base.txt
 
 COPY ./compose/local/__init__.py /src/volatility3/volatility3/framework/constants/__init__.py
 
diff --git a/compose/local/nginx/conf/default.conf b/compose/local/nginx/conf/default.conf
index 9000964a..7a105d90 100644
--- a/compose/local/nginx/conf/default.conf
+++ b/compose/local/nginx/conf/default.conf
@@ -14,12 +14,8 @@ map $http_upgrade $connection_upgrade {
 server {
     listen 80;
     listen [::]:80;
-    server_name orochi.dev;
-    location / {
-        proxy_set_header   X-Forwarded-For $remote_addr;
-        proxy_set_header   Host $http_host;
-        proxy_pass         http://django_wsgi;
-    }
+    server_name _;
+    return 301 https://$host$request_uri;
 }
 
 server {
diff --git a/config/settings/local.py b/config/settings/local.py
index ed6bdd56..da468de2 100644
--- a/config/settings/local.py
+++ b/config/settings/local.py
@@ -27,7 +27,7 @@
 
 # EMAIL
 # ------------------------------------------------------------------------------
-EMAIL_HOST = env("EMAIL_HOST", default="mailhog")
+EMAIL_HOST = env("EMAIL_HOST", default="mailpit")
 EMAIL_PORT = 1025
 EMAIL_USE_TLS = env("EMAIL_USE_TLS", default=True)
 EMAIL_HOST_USER = env("EMAIL_HOST_USER", default=None)
diff --git a/docker-compose.yml b/docker-compose.yml
index 8bd1ceb7..25348c65 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -42,7 +42,7 @@ services:
     restart: always
     depends_on:
       - postgres
-      - mailhog
+      - mailpit
     volumes:
       - media_path:/media
       - symbols_path:/src/volatility3/volatility3/symbols
@@ -73,7 +73,7 @@ services:
     restart: always
     depends_on:
       - postgres
-      - mailhog
+      - mailpit
     volumes:
       - media_path:/media
       - symbols_path:/src/volatility3/volatility3/symbols
@@ -103,12 +103,13 @@ services:
     ports:
       - "5432:5432"
 
-  mailhog:
-    image: mailhog/mailhog:v1.0.1
-    container_name: orochi_mailhog
-    hostname: mailhog
+  mailpit:
+    image: 'axllent/mailpit:latest'
+    container_name: orochi_mailpit
+    hostname: mailpit
     restart: always
     ports:
+      - "1025:1025"
       - "8025:8025"
 
   redis:
diff --git a/orochi/templates/base.html b/orochi/templates/base.html
index d4aa82c5..3762c03f 100644
--- a/orochi/templates/base.html
+++ b/orochi/templates/base.html
@@ -1,4 +1,4 @@
-{% load static i18n %}
+{% load static i18n custom_tags %}
 <!DOCTYPE html>
 <html lang="en">
 
@@ -36,23 +36,30 @@
       {% if request.user.is_authenticated %}
 
       <ul class="nav col-12 col-md-auto mb-2 justify-content-center mb-md-0">
+
+        {% if not request.user|has_group:"ReadOnly" %}
         <li>
           <a href="{% url 'users:plugins' username=request.user.username %}" class="nav-link link-body-emphasis">
             <i class="fa fa-xl fa-dice-d20 bi d-block mx-auto mb-1"></i>{% trans "Plugins"%}
           </a>
         </li>
+        {% endif %}
 
+        {% if not request.user|has_group:"ReadOnly" %}
         <li>
           <a href="{% url 'website:list_symbols' %}" class="nav-link link-body-emphasis">
             <i class="fas fa-xl fa-dollar-sign bi d-block mx-auto mb-1"></i>{% trans "Symbols"%}
           </a>
         </li>
+        {% endif %}
 
+        {% if not request.user|has_group:"ReadOnly" %}
         <li>
           <a href="{% url 'users:rules' username=request.user.username %}" class="nav-link link-body-emphasis">
             <i class="fas fa-xl fa-ruler bi d-block mx-auto mb-1"></i>{% trans "Rules"%}
           </a>
         </li>
+        {% endif %}
 
         <div class="dropdown me-2 mt-2">
           <a href="#" class="d-block link-body-emphasis text-decoration-none dropdown-toggle" data-bs-toggle="dropdown"
@@ -87,7 +94,7 @@
             <i class="fa fa-xl fa-dragon bi d-block mx-auto mb-1"></i>{{request.user}}
           </a>
           <ul class="dropdown-menu text-small">
-            {% if user.is_staff %}
+            {% if request.user.is_staff %}
             <li>
               <a href="{% url 'admin:index' %}" class="dropdown-item" target="_blank">
                 <i class="fa fa-crown"></i> {% trans "Admin"%}
diff --git a/orochi/templates/website/index.html b/orochi/templates/website/index.html
index 11b95a2a..29beec51 100644
--- a/orochi/templates/website/index.html
+++ b/orochi/templates/website/index.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% load static %}
+{% load static custom_tags %}
 
 {% block modal %}
 <div class="modal fade" id="modal-update" tabindex="-1">
@@ -13,12 +13,14 @@
 {% block sidebar %}
 <h6 class="sidebar-heading d-flex justify-content-between px-3 mt-4 mb-1 text-muted">
     <span>dumps
+        {% if not request.user|has_group:"ReadOnly" %}
         <button id="new-index" type="button" class="btn btn-outline-success btn-sm">
             <i class="fa-solid fa-plus"></i>
         </button>
         <button id="new-folder" type="button" class="btn btn-outline-warning btn-sm">
             <i class="fa-solid fa-folder-plus"></i>
         </button>
+        {% endif %}
     </span>
     <input type="text" id="filter_dump" name="filter_dump" style="width: 60%;" class="form-control form-control-sm" placeholder="Filter">
 </h6>
diff --git a/orochi/templates/website/partial_indices.html b/orochi/templates/website/partial_indices.html
index bd17f991..a083804c 100644
--- a/orochi/templates/website/partial_indices.html
+++ b/orochi/templates/website/partial_indices.html
@@ -1,3 +1,4 @@
+{% load custom_tags %}
 {% if dumps %}
 <ul class="nav flex-column" id="index-list">
     {% for folder, index, name, color, os, author, status, description in dumps %}
@@ -29,7 +30,6 @@
             <span class="checkmark" style="background-color: black;"></span>
             {% endif %}
 
-            {% if author == user.pk %}
             <div class="btn-group float-end" role="group">
                 <a href="{% url 'website:hex_view' index %}" class="btn btn-outline-dark hex-index btn-sm"
                     data-toggle="tooltip" data-placement="top" title="Hex View">
@@ -39,6 +39,7 @@
                     data-toggle="tooltip" data-placement="top" title="Dump Info">
                     <i class="fas fa-info"></i>
                 </button>
+                {% if not request.user|has_group:"ReadOnly" %}
                 <button type="button" class="btn btn-outline-danger remove-index btn-sm" data-index="{{index}}"
                     data-toggle="tooltip" data-placement="top" title="Delete Dump">
                     <i class="fas fa-trash"></i>
@@ -82,12 +83,12 @@
                     <i class="fas fa-backward"></i>
                 </button>
                 {% endif %}
+                {% endif %}
                 <button type="button" class="btn btn-outline-dark download_obj download-index btn-sm"
                     data-path="{{filename}}" data-toggle="tooltip" data-placement="top" title="Download Dump">
                     <i class="fas fa-file-download"></i>
                 </button>
             </div>
-            {% endif %}
         </label>
     </li>
     {% if forloop.last %}
diff --git a/orochi/templates/website/partial_note.html b/orochi/templates/website/partial_note.html
index e20cbd60..4665231b 100644
--- a/orochi/templates/website/partial_note.html
+++ b/orochi/templates/website/partial_note.html
@@ -8,9 +8,11 @@ <h1 class="h4">
     <button class="btn btn-sm btn-success" id="diff-dump" target="_blank" data-plugin="{{plugin}}" disabled>
         <i class="fas fa-code-compare" title="Rerun"></i> Compare
     </button>
+    {% if not request.user|has_group:"ReadOnly" %}
     <button type="button" class="btn btn-sm btn-warning" id="btn-resubmit" data-plugin="{{plugin}}" disabled>
         <i class="fas fa-sync" title="Rerun"></i> Rerun
     </button>
+    {% endif %}
 </h1>
 <div id="selected_alert" class="row row-cols-auto gy-2">
     {% for item in note %}
diff --git a/orochi/users/views.py b/orochi/users/views.py
index 3e812e1e..fb468a22 100644
--- a/orochi/users/views.py
+++ b/orochi/users/views.py
@@ -1,11 +1,15 @@
-from orochi.website.models import UserPlugin
+from typing import Any
+
+from django.contrib import messages
 from django.contrib.auth import get_user_model
 from django.contrib.auth.mixins import LoginRequiredMixin
+from django.db.models.query import QuerySet
+from django.shortcuts import get_object_or_404
 from django.urls import reverse
 from django.utils.translation import gettext_lazy as _
-from django.views.generic import RedirectView, DetailView
-from django.shortcuts import get_object_or_404
-from django.contrib import messages
+from django.views.generic import DetailView, RedirectView
+
+from orochi.website.models import UserPlugin
 
 User = get_user_model()
 
@@ -16,6 +20,13 @@ class UserYaraView(LoginRequiredMixin, DetailView):
     slug_url_kwarg = "username"
     template_name = "users/user_rules.html"
 
+    def get_queryset(self) -> QuerySet[Any]:
+        mine = self.request.user == User.objects.get(username=self.kwargs["username"])
+        qs = super().get_queryset()
+        if mine:
+            return qs
+        return qs.none()
+
 
 user_yara_view = UserYaraView.as_view()
 
@@ -42,6 +53,13 @@ def post(self, request, *args, **kwargs):
         )
         return self.render_to_response(context)
 
+    def get_queryset(self) -> QuerySet[Any]:
+        mine = self.request.user == User.objects.get(username=self.kwargs["username"])
+        qs = super().get_queryset()
+        if mine:
+            return qs
+        return qs.none()
+
 
 user_plugins_view = UserPluginView.as_view()
 
@@ -52,6 +70,13 @@ class UserBookmarksView(LoginRequiredMixin, DetailView):
     slug_url_kwarg = "username"
     template_name = "users/user_bookmarks.html"
 
+    def get_queryset(self) -> QuerySet[Any]:
+        mine = self.request.user == User.objects.get(username=self.kwargs["username"])
+        qs = super().get_queryset()
+        if mine:
+            return qs
+        return qs.none()
+
 
 user_bookmarks_view = UserBookmarksView.as_view()
 
diff --git a/orochi/website/api/permissions.py b/orochi/website/api/permissions.py
index d8878a4b..20bc4ab8 100644
--- a/orochi/website/api/permissions.py
+++ b/orochi/website/api/permissions.py
@@ -1,5 +1,5 @@
-from rest_framework import permissions
 from guardian.shortcuts import get_objects_for_user
+from rest_framework import permissions
 
 
 # Custom permissions
@@ -16,13 +16,22 @@ def has_permission(self, request, view):
 class AuthAndAuthorized(NotUpdateAndIsAuthenticated):
     def has_object_permission(self, request, view, obj):
         """
-        For object user must have permission
-        """
-        return (
-            request.user
-            and request.user.is_authenticated
-            and obj in get_objects_for_user(request.user, "website.can_see")
-        )
+        For object user must have can_see permission to list it,
+        also not being readonly to edit/delete
+        """
+        if view.action in ["retrieve", "list"]:
+            return (
+                request.user
+                and request.user.is_authenticated
+                and obj in get_objects_for_user(request.user, "website.can_see")
+            )
+        else:
+            return (
+                request.user
+                and request.user.is_authenticated
+                and obj in get_objects_for_user(request.user, "website.can_see")
+                and not request.user.groups.filter(name="ReadOnly").exists()
+            )
 
 
 class ParentAuthAndAuthorized(NotUpdateAndIsAuthenticated):
diff --git a/orochi/website/migrations/0053_create_default_groups.py b/orochi/website/migrations/0053_create_default_groups.py
new file mode 100644
index 00000000..4c4f6bf7
--- /dev/null
+++ b/orochi/website/migrations/0053_create_default_groups.py
@@ -0,0 +1,14 @@
+from django.apps import apps
+from django.db import migrations
+
+
+def create_groups(app, schema_editor):
+    Group = apps.get_model("auth", "Group")
+    group = Group(name="ReadOnly")
+    group.save()
+
+
+class Migration(migrations.Migration):
+    dependencies = [("website", "0052_create_superuser")]
+
+    operations = [migrations.RunPython(create_groups)]
diff --git a/orochi/website/templatetags/custom_tags.py b/orochi/website/templatetags/custom_tags.py
index 462fd259..df218e9d 100644
--- a/orochi/website/templatetags/custom_tags.py
+++ b/orochi/website/templatetags/custom_tags.py
@@ -1,4 +1,5 @@
 from datetime import datetime
+
 from django import template
 from django.forms import CheckboxInput
 
@@ -24,3 +25,8 @@ def starts_with(value, value_with):
 @register.filter(name="epoch")
 def epoch(value):
     return datetime.fromtimestamp(value)
+
+
+@register.filter(name="has_group")
+def has_group(user, group_name):
+    return user.groups.filter(name=group_name).exists()
diff --git a/orochi/website/views.py b/orochi/website/views.py
index e0682ca6..92d11854 100644
--- a/orochi/website/views.py
+++ b/orochi/website/views.py
@@ -21,7 +21,7 @@
 from django.conf import settings
 from django.contrib import messages
 from django.contrib.auth import get_user_model
-from django.contrib.auth.decorators import login_required
+from django.contrib.auth.decorators import login_required, user_passes_test
 from django.core import management
 from django.db import transaction
 from django.db.models import Q
@@ -120,6 +120,14 @@
 ]
 
 
+##############################
+# READONLY CHECK
+##############################
+def is_not_readonly(user):
+    """Check if user is readonly"""
+    return not user.groups.filter(name="ReadOnly").exists()
+
+
 ##############################
 # CHANGELOG
 ##############################
@@ -181,6 +189,7 @@ def plugin_f_and_f(dump, plugin, params, user_pk=None):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def enable_plugin(request):
     """Enable/disable plugin in user settings"""
     if request.method == "POST":
@@ -205,6 +214,7 @@ def handle_uploaded_file(index, plugin, f):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def plugin(request):
     """Prepares for plugin resubmission on selected index with/without parameters"""
     if request.method == "POST":
@@ -276,6 +286,7 @@ def plugin(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def parameters(request):
     """Get parameters from volatility api, returns form"""
     data = {}
@@ -302,6 +313,7 @@ def parameters(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def install_plugin(request):
     """Install plugin from url"""
     plugin_path = request.POST.get("plugin")
@@ -791,6 +803,8 @@ def diff_view(request, index_a, index_b, plugin):
 ##############################
 # RESTART
 ##############################
+@login_required
+@user_passes_test(is_not_readonly)
 def restart(request):
     """Restart plugin on index"""
     if request.META.get("HTTP_X_REQUESTED_WITH") == "XMLHttpRequest":
@@ -1017,6 +1031,7 @@ def bookmarks(request, indexes, plugin, query=None):
 # FOLDER
 ##############################
 @login_required
+@user_passes_test(is_not_readonly)
 def folder_create(request):
     data = {}
     if request.method == "POST":
@@ -1040,6 +1055,7 @@ def folder_create(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def folder_delete(request):
     if request.method == "POST":
         folder = request.POST.get("folder")
@@ -1071,6 +1087,7 @@ def index(request):
         "selected_indexes": [],
         "selected_plugin": None,
         "selected_query": None,
+        "readonly": is_not_readonly(request.user),
     }
     return TemplateResponse(request, "website/index.html", context)
 
@@ -1096,6 +1113,7 @@ def download(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def edit(request):
     """Edit index information"""
     data = {}
@@ -1172,6 +1190,7 @@ def index_f_and_f(dump_pk, user_pk, password=None, restart=None, move=True):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def create(request):
     """Manage new index creation"""
     data = {}
@@ -1264,6 +1283,7 @@ def create(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def delete(request):
     """Delete an index"""
     if request.META.get("HTTP_X_REQUESTED_WITH") == "XMLHttpRequest":
@@ -1304,6 +1324,7 @@ def update_symbols(request):
 # SYMBOLS
 ##############################
 @login_required
+@user_passes_test(is_not_readonly)
 def banner_symbols(request):
     """Return suggested banner and a button to download item"""
     data = {}
@@ -1354,12 +1375,14 @@ def banner_symbols(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def list_symbols(request):
     """Return list of symbols"""
     return render(request, "website/list_symbols.html")
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def iterate_symbols(request):
     """Ajax rules return for datatables"""
     start = int(request.GET.get("start"))
@@ -1406,6 +1429,7 @@ def iterate_symbols(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def upload_symbols(request):
     """Upload symbols"""
     data = {}
@@ -1448,6 +1472,7 @@ def upload_symbols(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def delete_symbol(request):
     """delete single symbol"""
     path = request.GET.get("path")
@@ -1460,6 +1485,7 @@ def delete_symbol(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def reload_symbols(request):
     """reload symbols"""
     dump = get_object_or_404(Dump, index=request.GET.get("index"))
@@ -1481,6 +1507,7 @@ def reload_symbols(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def download_isf(request):
     """Download all symbols from provided isf server path"""
     data = {}
@@ -1531,6 +1558,7 @@ def download_file(url, path):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def upload_packages(request):
     """Generate symbols from uploaded file"""
     data = {}
@@ -1565,6 +1593,7 @@ def upload_packages(request):
 # RULES
 ##############################
 @login_required
+@user_passes_test(is_not_readonly)
 def list_custom_rules(request):
     """Ajax rules return for datatables"""
     start = int(request.GET.get("start"))
@@ -1595,6 +1624,7 @@ def list_custom_rules(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def delete_rules(request):
     """Delete selected rules if yours"""
     rules_id = request.GET.getlist("rules[]")
@@ -1606,6 +1636,7 @@ def delete_rules(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def publish_rules(request):
     """Publish/Unpublish selected rules if your"""
     rules_id = request.GET.getlist("rules[]")
@@ -1618,6 +1649,7 @@ def publish_rules(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def make_rule_default(request):
     """Makes selected rule as default for user"""
     rule_id = request.GET.get("rule")
@@ -1651,6 +1683,7 @@ def make_rule_default(request):
 
 
 @login_required
+@user_passes_test(is_not_readonly)
 def download_rule(request, pk):
     """Download selected Rule"""
     rule = CustomRule.objects.filter(pk=pk).filter(