services:
  test:
    profiles: ["tools"]
    build:
      context: .
      target: test
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
  build:
    profiles: ["tools"]
    build:
      context: .
      target: build
  web:
    build:
      context: .
      target: preview
    ports:
      - "${WEB_BIND_ADDRESS:-127.0.0.1}:${WEB_PORT:-1420}:8080"
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/run
    security_opt:
      - no-new-privileges:true