services:
  frontend:
    container_name: yoyo_frontend_secure
    image: uo-yoyo
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "8096:80"
    restart: always
    read_only: true
    tmpfs:
      - /var/cache/nginx
      - /var/run
      - /var/log/nginx
    security_opt:
      - no-new-privileges:true
