chfle SW Boilerplate Docker
Overview
Creates all Docker infrastructure files directly in the workspace root based on requirements/tech-stack.yaml. Silent – nothing is printed in chat except the completion line.
If docker.services is empty in tech-stack.yaml, this skill does nothing and prints the completion line.
Required Input
requirements/tech-stack.yaml must exist. If missing, stop:
requirements/tech-stack.yamlnot found. Run/sw-tech-stack-plannerfirst.
Files to Create
Read docker.services, docker.volumes, docker.networks, deployment.reverse_proxy, frontend.framework, backend.framework, and database.primary from tech-stack.yaml.
docker-compose.yml (always, if docker.services is non-empty)
Build a complete docker-compose.yml using the exact compose_version from tech-stack.yaml:
- One service block per entry in
docker.services - Standard service configs per service type:
| Service | Config |
|---|---|
postgres |
Image postgres:16-alpine, env vars from .env, named volume, health check |
mysql / mariadb |
Image mysql:8 / mariadb:11, env vars, named volume, health check |
redis |
Image redis:7-alpine, named volume, healthcheck (redis-cli --raw ping) |
backend (NestJS/FastAPI/Go) |
Build from Dockerfile, depends_on db, env_file .env |
frontend (Next.js) |
Build from Dockerfile.frontend, depends_on backend, ports |
traefik |
Image traefik:v3, ports 80/443, volume for socket + certs |
Include all named volumes from docker.volumes and the network from docker.networks.
Dockerfiles
Dockerfile (backend) – create when a backend framework is in the stack:
| Backend | Base image / pattern |
|---|---|
| NestJS | node:22-alpine multi-stage: deps → build → production |
| FastAPI | python:3.13-slim with uvicorn |
| Spring Boot | eclipse-temurin:21-jre-alpine with fat jar |
| Go | golang:1.23-alpine multi-stage build → distroless |
Dockerfile.frontend – create when a frontend framework is in the stack:
| Frontend | Pattern |
|---|---|
| Next.js | node:22-alpine multi-stage: deps → builder → runner (standalone output) |
| React SPA (Vite) | node:22-alpine build stage → nginx:alpine serve stage |
.dockerignore
Create .dockerignore in root:
- Always:
node_modules,.env,.git,dist,build,coverage,*.log - Java:
target/,.gradle/,build/(Gradle) - Python:
__pycache__,*.pyc,.venv,.pytest_cache
Traefik config
If deployment.reverse_proxy contains "Traefik":
| Path | Content |
|---|---|
traefik.yml |
Static Traefik config: entryPoints (web 80, websecure 443), Let's Encrypt resolver, Docker provider |
dynamic/ |
Empty directory placeholder for dynamic config |
Traefik routing labels for exposed services — add to every service that should be reachable via Traefik (backend, frontend):
labels:
traefik.enable: "true"
traefik.http.routers.backend.rule: "Host(`api.${DOMAIN}`)"
traefik.http.routers.backend.entrypoints: "websecure"
traefik.http.routers.backend.tls.certresolver: "letsencrypt"
traefik.http.services.backend.loadbalancer.server.port: "3000"
Database services (postgres, redis) must NOT have traefik.enable: "true" — they should never be publicly routed.
Output Rules
- Write all files silently to the workspace root.
- Never output file content, code snippets, or file lists in chat.
- At the end, print exactly one line:
✅ sw-boilerplate-docker completed