dockerize

Detect your project's language, framework, and entry points, then generate a Dockerfile with an appropriate base image, multi-stage build, and non-root user. The Skill handles layer caching, health checks, and pinned dependency versions automatically.

Define each service with its image or build context, volume mounts, environment variables, and dependency ordering using depends_on. The Skill generates docker-compose.yml with networks, named volumes, and env_file references for configuration.

Multi-stage builds are recommended for compiled languages and frameworks with build steps, since they separate build tooling from the runtime image. This produces smaller final images containing only production artifacts and dependencies.

Never COPY .env files or bake secrets into image layers. Pass secrets as runtime environment variables, reference .env via env_file in docker-compose, add .env to .dockerignore, and document required variables in .env.example.

Running as non-root limits the damage an attacker can do if the container is compromised, since processes lack host root privileges. The generated Dockerfiles switch to a non-root user before the entrypoint, following standard container hardening practice.