aif-dockerize

Run the skill in generate mode: it scans your project files to detect the language, framework, and dependencies, then creates a multi-stage Dockerfile, compose.yml, compose.override.yml for development, and a hardened compose.production.yml.

Use the --audit flag or run the skill when a full Docker setup exists. It checks every service against a security checklist covering read-only filesystems, dropped capabilities, resource limits, healthchecks, log rotation, and secrets handling, then offers to fix the gaps.

Templates exist for Go, Node.js, Python, and PHP, with framework detection for Next.js, NestJS, FastAPI, Django, Flask, Laravel, Symfony, Gin, Echo, and others. Base image versions are read from project files like go.mod, package.json, or pyproject.toml.

Only when detected in the code or chosen during interactive setup. The skill greps for database, cache, queue, and proxy usage, merges results with your answers, and applies an over-engineering checklist to remove unneeded services.

Infrastructure services communicate over an internal Docker network in production, so no host ports are exposed for databases or caches. Only the reverse proxy or app binds ports 80 and 443, with localhost binding available as an exception.