diff --git a/dns/monitor_test.go b/dns/monitor_test.go
index b4bb95b..43f5a9e 100644
--- a/dns/monitor_test.go
+++ b/dns/monitor_test.go
@@ -293,7 +293,7 @@ type deadlockMonitorReceiver struct {
 	monitor *Monitor // +checklocksignore: Only written to from constructor.
 
 	mu sync.RWMutex
-	wg sync.WaitGroup
+	wg sync.WaitGroup // +checklocksignore: Only written to from constructor.
 
 	// +checklocks:mu
 	entry   *MonitorEntry
diff --git a/server/hub.go b/server/hub.go
index ce99306..c243b6a 100644
--- a/server/hub.go
+++ b/server/hub.go
@@ -110,13 +110,13 @@ var (
 	defaultFederationTimeoutSeconds = 10
 
 	// New connections have to send a "Hello" request after 2 seconds.
-	initialHelloTimeout = 2 * time.Second
+	initialHelloTimeout = 2 * time.Second // +checklocksignore: Global readonly variable.
 
 	// Anonymous clients have to join a room after 10 seconds.
-	anonmyousJoinRoomTimeout = 10 * time.Second
+	anonmyousJoinRoomTimeout = 10 * time.Second // +checklocksignore: Global readonly variable.
 
 	// Sessions expire 30 seconds after the connection closed.
-	sessionExpireDuration = 30 * time.Second
+	sessionExpireDuration = 30 * time.Second // +checklocksignore: Global readonly variable.
 
 	// Run housekeeping jobs once per second
 	housekeepingInterval = time.Second
diff --git a/sfu/proxy/config_static.go b/sfu/proxy/config_static.go
index f5bf4d5..341fa7f 100644
--- a/sfu/proxy/config_static.go
+++ b/sfu/proxy/config_static.go
@@ -48,7 +48,7 @@ type configStatic struct {
 	mu     sync.Mutex
 	proxy  McuProxy
 
-	dnsMonitor *dns.Monitor
+	dnsMonitor *dns.Monitor // +checklocksignore: Only written to from constructor.
 	// +checklocks:mu
 	dnsDiscovery bool