services:
  test:
    build:
      context: .
      target: test
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
  build:
    build:
      context: .
      target: build
  preview:
    build:
      context: .
      target: preview
    ports:
      - "127.0.0.1:8080:8080"
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/run
    security_opt:
      - no-new-privileges:true