@jeder if you only want to set it to "read-only" insofar as "it will not process any more incoming activities" you can set the /inbox path to return a 410 in your reverse proxy.
in the case of 410 ("Gone") other instances (at least foundkey) will also not try to send stuff there again.