docker-expert

What problem does it solve? Containerizing a pnpm monorepo for on-prem MVP deployment often leads to bloated images, root-privileged containers, leaked secrets, and over-engineered orchestration. This Skill provides concrete rules, patterns, and review checklists to build secure, reproducible Docker setups aligned with the project's actual baseline. ## Core Features & Use Cases - Dockerfile Design & Review: Multi-stage builds, selective layer copying for cache efficiency, non-root runtimes, and healthchecks tailored to pnpm monorepo services. - Compose & Service Orchestration: Simple networks, explicit service dependencies, startup ordering, and per-environment configuration for local and on-prem MVP deployments. - Image Hardening: Keeps secrets out of images and versioned code, minimizes runtime attack surface, and flags anti-patterns like early COPY . . or credentials in Compose files. - Use Case: You need a production Dockerfile for a backend service in the monorepo. The Skill guides a multi-stage build that caches pnpm dependencies, ships only runtime artifacts, runs as a non-root user, and includes a healthcheck. ## Quick Start Ask the assistant to review or write a Dockerfile and Compose setup for a monorepo service following the on-prem security baseline.