Files
gps-denied-onboard/.claude/rules/docker.mdc
T
Yuzviak 6ff14a1a7d chore: import .claude command skills, CLAUDE.md, .gitignore, next_steps.md
- Vendor local .claude/ command skills (autopilot, plan, implement, etc.)
- Add CLAUDE.md pointing slash commands to .claude/commands/*/SKILL.md
- Untrack docs-Lokal/ and ignore .planning/ for local-only planning docs
- Include next_steps.md pulled from upstream

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-16 21:39:43 +03:00

16 lines
776 B
Plaintext

---
description: "Docker and Docker Compose conventions: multi-stage builds, security, image pinning, health checks"
globs: ["**/Dockerfile*", "**/docker-compose*", "**/.dockerignore"]
---
# Docker
- Use multi-stage builds to minimize image size
- Pin base image versions (never use `:latest` in production)
- Use `.dockerignore` to exclude build artifacts, `.git`, `node_modules`, etc.
- Run as non-root user in production containers
- Use `COPY` over `ADD`; order layers from least to most frequently changed
- Use health checks in docker-compose and Dockerfiles
- Use named volumes for persistent data; never store state in container filesystem
- Centralize environment configuration; use `.env` files only for local dev
- Keep services focused: one process per container