Settings live in the database.
Technically you also want to backup the uploads folder and the app.yml site definition. However that is usually dealt with by having the app.yml in source control and the uploads in a object storage service.
No need for read-only.