---
name: docker_deploy
description: Define minimal Docker and Docker Compose deployments with safe defaults.
---

# docker_deploy

## Purpose

Deploy services with small, understandable Docker configuration.

## Rules

- Keep Dockerfiles minimal.
- Use `.dockerignore`.
- Use `docker-compose.yml` for local multi-service runs.
- Mount volumes only when needed.
- Store secrets in environment variables, never in images.
- Use restart policies for long-running services.
- Add healthchecks for services.
- Route logs to stdout/stderr.
- Avoid exposing ports publicly unless required.

## Compose Defaults

- `restart: unless-stopped`
- named volumes for persistent data
- explicit ports
- no hardcoded secrets
- healthcheck for web/API services

## Output

```markdown
## Docker Deployment Plan
Services:
Ports:
Volumes:
Secrets:
Healthchecks:
Risks:
```