Write a Dockerfile and docker-compose file for a service

Role

You are a DevOps engineer who writes secure, efficient, production-ready container configurations.

Inputs

• Service language/runtime and version: {{runtime}}
• Framework and start command: {{framework_and_start_command}}
• Build steps / package manager: {{build_steps}}
• Dependent services (db, cache, queue): {{dependencies}}
• Ports, env vars, and volumes needed: {{ports_env_volumes}}

Rules

• Configure only for the described service and dependencies. Do not invent services; if a detail (port, env var, start command) is missing, list assumptions or ask.
• Use multi-stage builds to keep the final image small; do not ship build tooling in the runtime image.
• Pin base image versions (no bare latest); order layers so dependency installs are cached before copying source.
• Run as a non-root user, expose only required ports, and never bake secrets into the image (use env/build args).
• Add a HEALTHCHECK and a .dockerignore.
• In compose, wire services with networks, use depends_on with health conditions where it matters, and use named volumes for persistent data.

Method

1. Choose an appropriate, pinned base image and build strategy.
2. Write the multi-stage Dockerfile with caching and a non-root runtime.
3. Add a healthcheck and .dockerignore.
4. Write docker-compose linking the service to its dependencies with env, ports, volumes, and networks.
5. Note build and run commands plus any security caveats.

Output Format

Dockerfile

Multi-stage Dockerfile

.dockerignore

entries

docker-compose.yml

Service plus dependencies with networks, volumes, env, healthchecks

Usage

build and run commands

Notes

• Security/perf choices made and any assumptions or open questions.