Prompt file imported from ThiagoGuislotti/copilot-instructions (.github/prompts/create-docker-setup.prompt.md). Fill in {{appName}}, {{appType}}, {{runtime}}, {{exposedPort}}, {{needsDatabase}}, {{registry}}, {{version}}, {{REGISTRY}}, {{APP_NAME}}, {{VERSION}}, {{namespace}}, {{NAMESPACE}} before use. Copyright stays with the author.

Create Docker Setup

Name: create-docker-setup
Author: ThiagoGuislotti

Generate complete Docker setup with multi-stage builds, docker-compose, and Kubernetes manifests.

Instructions

Create Docker setup based on:

Input Variables

{{appName}} - Application identifier
{{appType}} - Application category
{{runtime}} - Programming runtime
{{exposedPort}} - Container port
{{needsDatabase}} - Database requirement

1. Multi-Stage Dockerfile

.NET API

Location: Dockerfile

# syntax=docker/dockerfile:1
# Stage 1: Build
FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build
WORKDIR /src

# Copy solution and project files
COPY ["*.sln", "./"]
COPY ["src/{{appName}}.Api/*.csproj", "src/{{appName}}.Api/"]
COPY ["src/{{appName}}.Application/*.csproj", "src/{{appName}}.Application/"]
COPY ["src/{{appName}}.Domain/*.csproj", "src/{{appName}}.Domain/"]
COPY ["src/{{appName}}.Infrastructure/*.csproj", "src/{{appName}}.Infrastructure/"]

# Restore dependencies
RUN dotnet restore

# Copy source code
COPY . .

# Build application
WORKDIR "/src/src/{{appName}}.Api"
RUN dotnet build -c Release -o /app/build --no-restore

# Stage 2: Publish
FROM build AS publish
RUN dotnet publish -c Release -o /app/publish --no-restore --no-build /p:UseAppHost=false

# Stage 3: Runtime
FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS runtime
WORKDIR /app

# Security: Run as non-root user
RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
USER appuser

# Copy published application
COPY --from=publish --chown=appuser:appuser /app/publish .

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD curl -f http://localhost:{{exposedPort}}/health || exit 1

# Expose port
EXPOSE {{exposedPort}}

# Entry point
ENTRYPOINT ["dotnet", "{{appName}}.Api.dll"]

Node.js SPA (Vue/Quasar)

Location: Dockerfile

# syntax=docker/dockerfile:1
# Stage 1: Build
FROM node:20-alpine AS build
WORKDIR /app

# Copy package files
COPY package*.json ./
COPY yarn.lock ./

# Install dependencies
RUN yarn install --frozen-lockfile

# Copy source
COPY . .

# Build application
RUN yarn build

# Stage 2: Runtime (Nginx)
FROM nginx:alpine AS runtime
WORKDIR /usr/share/nginx/html

# Copy built assets
COPY --from=build /app/dist/spa .

# Copy nginx configuration
COPY nginx.conf /etc/nginx/conf.d/default.conf

# Security: Run as non-root
RUN chown -R nginx:nginx /usr/share/nginx/html && \
    chown -R nginx:nginx /var/cache/nginx && \
    chown -R nginx:nginx /var/log/nginx && \
    chmod -R 755 /usr/share/nginx/html

USER nginx

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD wget --no-verbose --tries=1 --spider http://localhost:{{exposedPort}}/health || exit 1

EXPOSE {{exposedPort}}

CMD ["nginx", "-g", "daemon off;"]

Rust Application

Location: Dockerfile

# syntax=docker/dockerfile:1
# Stage 1: Build
FROM rust:1.75 AS build
WORKDIR /app

# Install dependencies
RUN apt-get update && apt-get install -y \
    musl-tools \
    && rm -rf /var/lib/apt/lists/*

# Copy Cargo files
COPY Cargo.toml Cargo.lock ./

# Create dummy main to cache dependencies
RUN mkdir src && \
    echo "fn main() {}" > src/main.rs && \
    cargo build --release && \
    rm -rf src

# Copy source
COPY . .

# Build application
RUN cargo build --release

# Stage 2: Runtime
FROM debian:bookworm-slim AS runtime
WORKDIR /app

# Install runtime dependencies
RUN apt-get update && apt-get install -y \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# Security: Run as non-root
RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
USER appuser

# Copy binary
COPY --from=build --chown=appuser:appuser /app/target/release/{{appName}} .

# Health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
  CMD ["/app/{{appName}}", "health-check"]

EXPOSE {{exposedPort}}

ENTRYPOINT ["/app/{{appName}}"]

2. Docker Compose

docker-compose.yml

Location: docker-compose.yml

version: '3.8'

services:
  {{appName}}:
    build:
      context: .
      dockerfile: Dockerfile
      target: runtime
    container_name: {{appName}}
    ports:
      - "{{exposedPort}}:{{exposedPort}}"
    environment:
      - ASPNETCORE_ENVIRONMENT=Development
      - ASPNETCORE_URLS=http://+:{{exposedPort}}
      ${needsDatabase === 'yes' ? '- ConnectionStrings__DefaultConnection=Host=db;Database={{appName}};Username=postgres;Password=postgres' : ''}
    ${needsDatabase === 'yes' ? 'depends_on:\n      db:\n        condition: service_healthy' : ''}
    networks:
      - {{appName}}-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:{{exposedPort}}/health"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 10s

${needsDatabase === 'yes' ? `  db:
    image: postgres:16-alpine
    container_name: {{appName}}-db
    environment:
      POSTGRES_DB: {{appName}}
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    ports:
      - "5432:5432"
    volumes:
      - postgres-data:/var/lib/postgresql/data
    networks:
      - {{appName}}-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5` : ''}

networks:
  {{appName}}-network:
    driver: bridge

${needsDatabase === 'yes' ? 'volumes:\n  postgres-data:' : ''}

.dockerignore

Location: .dockerignore

# Git
.git
.gitignore
.gitattributes

# Docker
Dockerfile*
docker-compose*
.dockerignore

# Documentation
README.md
docs/
*.md

# IDE
.vs/
.vscode/
.idea/
*.swp
*.swo

# Build artifacts
**/bin/
**/obj/
**/node_modules/
**/dist/
**/target/
*.log

# Test files
**/tests/
**/*.test.*
**/*.spec.*

# CI/CD
.github/
.gitlab-ci.yml
azure-pipelines.yml

3. Kubernetes Manifests

deployment.yaml

Location: k8s/deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{appName}}
  labels:
    app: {{appName}}
    version: v1
spec:
  replicas: 3
  selector:
    matchLabels:
      app: {{appName}}
  template:
    metadata:
      labels:
        app: {{appName}}
        version: v1
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        fsGroup: 1000
      containers:
      - name: {{appName}}
        image: {{registry}}/{{appName}}:latest
        imagePullPolicy: Always
        ports:
        - containerPort: {{exposedPort}}
          protocol: TCP
        env:
        - name: ASPNETCORE_ENVIRONMENT
          value: "Production"
        - name: ASPNETCORE_URLS
          value: "http://+:{{exposedPort}}"
        ${needsDatabase === 'yes' ? '- name: ConnectionStrings__DefaultConnection\n          valueFrom:\n            secretKeyRef:\n              name: ' + appName + '-secrets\n              key: db-connection-string' : ''}
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
          limits:
            cpu: 500m
            memory: 512Mi
        livenessProbe:
          httpGet:
            path: /health
            port: {{exposedPort}}
          initialDelaySeconds: 30
          periodSeconds: 10
          timeoutSeconds: 3
          failureThreshold: 3
        readinessProbe:
          httpGet:
            path: /health/ready
            port: {{exposedPort}}
          initialDelaySeconds: 10
          periodSeconds: 5
          timeoutSeconds: 3
          failureThreshold: 3
        securityContext:
          allowPrivilegeEscalation: false
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          capabilities:
            drop:
            - ALL

service.yaml

Location: k8s/service.yaml

apiVersion: v1
kind: Service
metadata:
  name: {{appName}}
  labels:
    app: {{appName}}
spec:
  type: ClusterIP
  selector:
    app: {{appName}}
  ports:
  - name: http
    port: 80
    targetPort: {{exposedPort}}
    protocol: TCP

ingress.yaml

Location: k8s/ingress.yaml

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{appName}}
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
  ingressClassName: nginx
  tls:
  - hosts:
    - {{appName}}.example.com
    secretName: {{appName}}-tls
  rules:
  - host: {{appName}}.example.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: {{appName}}
            port:
              number: 80

configmap.yaml

Location: k8s/configmap.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: {{appName}}-config
data:
  app-settings: |
    {
      "Logging": {
        "LogLevel": {
          "Default": "Information",
          "Microsoft.AspNetCore": "Warning"
        }
      }
    }

secrets.yaml (Template)

Location: k8s/secrets.yaml.template

apiVersion: v1
kind: Secret
metadata:
  name: {{appName}}-secrets
type: Opaque
stringData:
  ${needsDatabase === 'yes' ? 'db-connection-string: "REPLACE_WITH_ACTUAL_CONNECTION_STRING"' : 'api-key: "REPLACE_WITH_ACTUAL_API_KEY"'}

4. Build & Run Scripts

build.sh

Location: scripts/build.sh

#!/bin/bash
set -e

APP_NAME="{{appName}}"
REGISTRY="{{registry}}"
VERSION="{{version}}"

echo "Building Docker image..."
docker build -t {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} .

echo "Tagging as latest..."
docker tag {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} {{REGISTRY}}/{{APP_NAME}}:latest

echo "Build complete!"
echo "Image: {{REGISTRY}}/{{APP_NAME}}:{{VERSION}}"

deploy.sh

Location: scripts/deploy.sh

#!/bin/bash
set -e

APP_NAME="{{appName}}"
NAMESPACE="{{namespace}}"

echo "Applying Kubernetes manifests..."
kubectl apply -f k8s/configmap.yaml -n {{NAMESPACE}}
kubectl apply -f k8s/secrets.yaml -n {{NAMESPACE}}
kubectl apply -f k8s/deployment.yaml -n {{NAMESPACE}}
kubectl apply -f k8s/service.yaml -n {{NAMESPACE}}
kubectl apply -f k8s/ingress.yaml -n {{NAMESPACE}}

echo "Waiting for deployment to be ready..."
kubectl rollout status deployment/{{APP_NAME}} -n {{NAMESPACE}}

echo "Deployment complete!"

Quality Checklist

Generate complete Docker setup following DevOps best practices.

# Create Docker Setup Generate complete Docker setup with multi-stage builds, docker-compose, and Kubernetes manifests. ## Instructions Create Docker setup based on: - [docker.instructions.md](../instructions/docker.instructions.md) - [k8s.instructions.md](../instructions/k8s.instructions.md) - [ci-cd-devops.instructions.md](../instructions/ci-cd-devops.instructions.md) ## Input Variables - `{{appName}}` - Application identifier - `{{appType}}` - Application category - `{{runtime}}` - Programming runtime - `{{exposedPort}}` - Container port - `{{needsDatabase}}` - Database requirement ## 1. Multi-Stage Dockerfile ### .NET API **Location:** `Dockerfile` ```dockerfile # syntax=docker/dockerfile:1 # Stage 1: Build FROM mcr.microsoft.com/dotnet/sdk:9.0 AS build WORKDIR /src # Copy solution and project files COPY ["*.sln", "./"] COPY ["src/{{appName}}.Api/*.csproj", "src/{{appName}}.Api/"] COPY ["src/{{appName}}.Application/*.csproj", "src/{{appName}}.Application/"] COPY ["src/{{appName}}.Domain/*.csproj", "src/{{appName}}.Domain/"] COPY ["src/{{appName}}.Infrastructure/*.csproj", "src/{{appName}}.Infrastructure/"] # Restore dependencies RUN dotnet restore # Copy source code COPY . . # Build application WORKDIR "/src/src/{{appName}}.Api" RUN dotnet build -c Release -o /app/build --no-restore # Stage 2: Publish FROM build AS publish RUN dotnet publish -c Release -o /app/publish --no-restore --no-build /p:UseAppHost=false # Stage 3: Runtime FROM mcr.microsoft.com/dotnet/aspnet:9.0 AS runtime WORKDIR /app # Security: Run as non-root user RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app USER appuser # Copy published application COPY --from=publish --chown=appuser:appuser /app/publish . # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD curl -f http://localhost:{{exposedPort}}/health || exit 1 # Expose port EXPOSE {{exposedPort}} # Entry point ENTRYPOINT ["dotnet", "{{appName}}.Api.dll"] ``` ### Node.js SPA (Vue/Quasar) **Location:** `Dockerfile` ```dockerfile # syntax=docker/dockerfile:1 # Stage 1: Build FROM node:20-alpine AS build WORKDIR /app # Copy package files COPY package*.json ./ COPY yarn.lock ./ # Install dependencies RUN yarn install --frozen-lockfile # Copy source COPY . . # Build application RUN yarn build # Stage 2: Runtime (Nginx) FROM nginx:alpine AS runtime WORKDIR /usr/share/nginx/html # Copy built assets COPY --from=build /app/dist/spa . # Copy nginx configuration COPY nginx.conf /etc/nginx/conf.d/default.conf # Security: Run as non-root RUN chown -R nginx:nginx /usr/share/nginx/html && \ chown -R nginx:nginx /var/cache/nginx && \ chown -R nginx:nginx /var/log/nginx && \ chmod -R 755 /usr/share/nginx/html USER nginx # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD wget --no-verbose --tries=1 --spider http://localhost:{{exposedPort}}/health || exit 1 EXPOSE {{exposedPort}} CMD ["nginx", "-g", "daemon off;"] ``` ### Rust Application **Location:** `Dockerfile` ```dockerfile # syntax=docker/dockerfile:1 # Stage 1: Build FROM rust:1.75 AS build WORKDIR /app # Install dependencies RUN apt-get update && apt-get install -y \ musl-tools \ && rm -rf /var/lib/apt/lists/* # Copy Cargo files COPY Cargo.toml Cargo.lock ./ # Create dummy main to cache dependencies RUN mkdir src && \ echo "fn main() {}" > src/main.rs && \ cargo build --release && \ rm -rf src # Copy source COPY . . # Build application RUN cargo build --release # Stage 2: Runtime FROM debian:bookworm-slim AS runtime WORKDIR /app # Install runtime dependencies RUN apt-get update && apt-get install -y \ ca-certificates \ && rm -rf /var/lib/apt/lists/* # Security: Run as non-root RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app USER appuser # Copy binary COPY --from=build --chown=appuser:appuser /app/target/release/{{appName}} . # Health check HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \ CMD ["/app/{{appName}}", "health-check"] EXPOSE {{exposedPort}} ENTRYPOINT ["/app/{{appName}}"] ``` ## 2. Docker Compose ### docker-compose.yml **Location:** `docker-compose.yml` ```yaml version: '3.8' services: {{appName}}: build: context: . dockerfile: Dockerfile target: runtime container_name: {{appName}} ports: - "{{exposedPort}}:{{exposedPort}}" environment: - ASPNETCORE_ENVIRONMENT=Development - ASPNETCORE_URLS=http://+:{{exposedPort}} ${needsDatabase === 'yes' ? '- ConnectionStrings__DefaultConnection=Host=db;Database={{appName}};Username=postgres;Password=postgres' : ''} ${needsDatabase === 'yes' ? 'depends_on:\n db:\n condition: service_healthy' : ''} networks: - {{appName}}-network restart: unless-stopped healthcheck: test: ["CMD", "curl", "-f", "http://localhost:{{exposedPort}}/health"] interval: 30s timeout: 3s retries: 3 start_period: 10s ${needsDatabase === 'yes' ? ` db: image: postgres:16-alpine container_name: {{appName}}-db environment: POSTGRES_DB: {{appName}} POSTGRES_USER: postgres POSTGRES_PASSWORD: postgres ports: - "5432:5432" volumes: - postgres-data:/var/lib/postgresql/data networks: - {{appName}}-network restart: unless-stopped healthcheck: test: ["CMD-SHELL", "pg_isready -U postgres"] interval: 10s timeout: 5s retries: 5` : ''} networks: {{appName}}-network: driver: bridge ${needsDatabase === 'yes' ? 'volumes:\n postgres-data:' : ''} ``` ### .dockerignore **Location:** `.dockerignore` ``` # Git .git .gitignore .gitattributes # Docker Dockerfile* docker-compose* .dockerignore # Documentation README.md docs/ *.md # IDE .vs/ .vscode/ .idea/ *.swp *.swo # Build artifacts **/bin/ **/obj/ **/node_modules/ **/dist/ **/target/ *.log # Test files **/tests/ **/*.test.* **/*.spec.* # CI/CD .github/ .gitlab-ci.yml azure-pipelines.yml ``` ## 3. Kubernetes Manifests ### deployment.yaml **Location:** `k8s/deployment.yaml` ```yaml apiVersion: apps/v1 kind: Deployment metadata: name: {{appName}} labels: app: {{appName}} version: v1 spec: replicas: 3 selector: matchLabels: app: {{appName}} template: metadata: labels: app: {{appName}} version: v1 spec: securityContext: runAsNonRoot: true runAsUser: 1000 fsGroup: 1000 containers: - name: {{appName}} image: {{registry}}/{{appName}}:latest imagePullPolicy: Always ports: - containerPort: {{exposedPort}} protocol: TCP env: - name: ASPNETCORE_ENVIRONMENT value: "Production" - name: ASPNETCORE_URLS value: "http://+:{{exposedPort}}" ${needsDatabase === 'yes' ? '- name: ConnectionStrings__DefaultConnection\n valueFrom:\n secretKeyRef:\n name: ' + appName + '-secrets\n key: db-connection-string' : ''} resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi livenessProbe: httpGet: path: /health port: {{exposedPort}} initialDelaySeconds: 30 periodSeconds: 10 timeoutSeconds: 3 failureThreshold: 3 readinessProbe: httpGet: path: /health/ready port: {{exposedPort}} initialDelaySeconds: 10 periodSeconds: 5 timeoutSeconds: 3 failureThreshold: 3 securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true runAsNonRoot: true capabilities: drop: - ALL ``` ### service.yaml **Location:** `k8s/service.yaml` ```yaml apiVersion: v1 kind: Service metadata: name: {{appName}} labels: app: {{appName}} spec: type: ClusterIP selector: app: {{appName}} ports: - name: http port: 80 targetPort: {{exposedPort}} protocol: TCP ``` ### ingress.yaml **Location:** `k8s/ingress.yaml` ```yaml apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: {{appName}} annotations: cert-manager.io/cluster-issuer: letsencrypt-prod nginx.ingress.kubernetes.io/ssl-redirect: "true" spec: ingressClassName: nginx tls: - hosts: - {{appName}}.example.com secretName: {{appName}}-tls rules: - host: {{appName}}.example.com http: paths: - path: / pathType: Prefix backend: service: name: {{appName}} port: number: 80 ``` ### configmap.yaml **Location:** `k8s/configmap.yaml` ```yaml apiVersion: v1 kind: ConfigMap metadata: name: {{appName}}-config data: app-settings: | { "Logging": { "LogLevel": { "Default": "Information", "Microsoft.AspNetCore": "Warning" } } } ``` ### secrets.yaml (Template) **Location:** `k8s/secrets.yaml.template` ```yaml apiVersion: v1 kind: Secret metadata: name: {{appName}}-secrets type: Opaque stringData: ${needsDatabase === 'yes' ? 'db-connection-string: "REPLACE_WITH_ACTUAL_CONNECTION_STRING"' : 'api-key: "REPLACE_WITH_ACTUAL_API_KEY"'} ``` ## 4. Build & Run Scripts ### build.sh **Location:** `scripts/build.sh` ```bash #!/bin/bash set -e APP_NAME="{{appName}}" REGISTRY="{{registry}}" VERSION="{{version}}" echo "Building Docker image..." docker build -t {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} . echo "Tagging as latest..." docker tag {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} {{REGISTRY}}/{{APP_NAME}}:latest echo "Build complete!" echo "Image: {{REGISTRY}}/{{APP_NAME}}:{{VERSION}}" ``` ### deploy.sh **Location:** `scripts/deploy.sh` ```bash #!/bin/bash set -e APP_NAME="{{appName}}" NAMESPACE="{{namespace}}" echo "Applying Kubernetes manifests..." kubectl apply -f k8s/configmap.yaml -n {{NAMESPACE}} kubectl apply -f k8s/secrets.yaml -n {{NAMESPACE}} kubectl apply -f k8s/deployment.yaml -n {{NAMESPACE}} kubectl apply -f k8s/service.yaml -n {{NAMESPACE}} kubectl apply -f k8s/ingress.yaml -n {{NAMESPACE}} echo "Waiting for deployment to be ready..." kubectl rollout status deployment/{{APP_NAME}} -n {{NAMESPACE}} echo "Deployment complete!" ``` ## Quality Checklist - [ ] Multi-stage Dockerfile with minimal runtime image - [ ] Non-root user in container (security) - [ ] Health checks configured - [ ] .dockerignore excludes build artifacts - [ ] docker-compose.yml with networks and volumes - [ ] Kubernetes manifests with resource limits - [ ] Liveness and readiness probes - [ ] Security context (no privilege escalation) - [ ] ConfigMaps for configuration - [ ] Secrets for sensitive data (template only) - [ ] Build and deploy scripts executable Generate complete Docker setup following DevOps best practices.

{ "prompt": "# Create Docker Setup\nGenerate complete Docker setup with multi-stage builds, docker-compose, and Kubernetes manifests.\n\n## Instructions\nCreate Docker setup based on:\n- [docker.instructions.md](../instructions/docker.instructions.md)\n- [k8s.instructions.md](../instructions/k8s.instructions.md)\n- [ci-cd-devops.instructions.md](../instructions/ci-cd-devops.instructions.md)\n\n## Input Variables\n- `{{appName}}` - Application identifier\n- `{{appType}}` - Application category\n- `{{runtime}}` - Programming runtime\n- `{{exposedPort}}` - Container port\n- `{{needsDatabase}}` - Database requirement\n\n## 1. Multi-Stage Dockerfile\n\n### .NET API\n**Location:** `Dockerfile`\n\n```dockerfile\n# syntax=docker/dockerfile:1\n# Stage 1: Build\nFROM mcr.microsoft.com/dotnet/sdk:9.0 AS build\nWORKDIR /src\n\n# Copy solution and project files\nCOPY [\"*.sln\", \"./\"]\nCOPY [\"src/{{appName}}.Api/*.csproj\", \"src/{{appName}}.Api/\"]\nCOPY [\"src/{{appName}}.Application/*.csproj\", \"src/{{appName}}.Application/\"]\nCOPY [\"src/{{appName}}.Domain/*.csproj\", \"src/{{appName}}.Domain/\"]\nCOPY [\"src/{{appName}}.Infrastructure/*.csproj\", \"src/{{appName}}.Infrastructure/\"]\n\n# Restore dependencies\nRUN dotnet restore\n\n# Copy source code\nCOPY . .\n\n# Build application\nWORKDIR \"/src/src/{{appName}}.Api\"\nRUN dotnet build -c Release -o /app/build --no-restore\n\n# Stage 2: Publish\nFROM build AS publish\nRUN dotnet publish -c Release -o /app/publish --no-restore --no-build /p:UseAppHost=false\n\n# Stage 3: Runtime\nFROM mcr.microsoft.com/dotnet/aspnet:9.0 AS runtime\nWORKDIR /app\n\n# Security: Run as non-root user\nRUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app\nUSER appuser\n\n# Copy published application\nCOPY --from=publish --chown=appuser:appuser /app/publish .\n\n# Health check\nHEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\\n CMD curl -f http://localhost:{{exposedPort}}/health || exit 1\n\n# Expose port\nEXPOSE {{exposedPort}}\n\n# Entry point\nENTRYPOINT [\"dotnet\", \"{{appName}}.Api.dll\"]\n```\n\n### Node.js SPA (Vue/Quasar)\n**Location:** `Dockerfile`\n\n```dockerfile\n# syntax=docker/dockerfile:1\n# Stage 1: Build\nFROM node:20-alpine AS build\nWORKDIR /app\n\n# Copy package files\nCOPY package*.json ./\nCOPY yarn.lock ./\n\n# Install dependencies\nRUN yarn install --frozen-lockfile\n\n# Copy source\nCOPY . .\n\n# Build application\nRUN yarn build\n\n# Stage 2: Runtime (Nginx)\nFROM nginx:alpine AS runtime\nWORKDIR /usr/share/nginx/html\n\n# Copy built assets\nCOPY --from=build /app/dist/spa .\n\n# Copy nginx configuration\nCOPY nginx.conf /etc/nginx/conf.d/default.conf\n\n# Security: Run as non-root\nRUN chown -R nginx:nginx /usr/share/nginx/html && \\\n chown -R nginx:nginx /var/cache/nginx && \\\n chown -R nginx:nginx /var/log/nginx && \\\n chmod -R 755 /usr/share/nginx/html\n\nUSER nginx\n\n# Health check\nHEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\\n CMD wget --no-verbose --tries=1 --spider http://localhost:{{exposedPort}}/health || exit 1\n\nEXPOSE {{exposedPort}}\n\nCMD [\"nginx\", \"-g\", \"daemon off;\"]\n```\n\n### Rust Application\n**Location:** `Dockerfile`\n\n```dockerfile\n# syntax=docker/dockerfile:1\n# Stage 1: Build\nFROM rust:1.75 AS build\nWORKDIR /app\n\n# Install dependencies\nRUN apt-get update && apt-get install -y \\\n musl-tools \\\n && rm -rf /var/lib/apt/lists/*\n\n# Copy Cargo files\nCOPY Cargo.toml Cargo.lock ./\n\n# Create dummy main to cache dependencies\nRUN mkdir src && \\\n echo \"fn main() {}\" > src/main.rs && \\\n cargo build --release && \\\n rm -rf src\n\n# Copy source\nCOPY . .\n\n# Build application\nRUN cargo build --release\n\n# Stage 2: Runtime\nFROM debian:bookworm-slim AS runtime\nWORKDIR /app\n\n# Install runtime dependencies\nRUN apt-get update && apt-get install -y \\\n ca-certificates \\\n && rm -rf /var/lib/apt/lists/*\n\n# Security: Run as non-root\nRUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app\nUSER appuser\n\n# Copy binary\nCOPY --from=build --chown=appuser:appuser /app/target/release/{{appName}} .\n\n# Health check\nHEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \\\n CMD [\"/app/{{appName}}\", \"health-check\"]\n\nEXPOSE {{exposedPort}}\n\nENTRYPOINT [\"/app/{{appName}}\"]\n```\n\n## 2. Docker Compose\n\n### docker-compose.yml\n**Location:** `docker-compose.yml`\n\n```yaml\nversion: '3.8'\n\nservices:\n {{appName}}:\n build:\n context: .\n dockerfile: Dockerfile\n target: runtime\n container_name: {{appName}}\n ports:\n - \"{{exposedPort}}:{{exposedPort}}\"\n environment:\n - ASPNETCORE_ENVIRONMENT=Development\n - ASPNETCORE_URLS=http://+:{{exposedPort}}\n ${needsDatabase === 'yes' ? '- ConnectionStrings__DefaultConnection=Host=db;Database={{appName}};Username=postgres;Password=postgres' : ''}\n ${needsDatabase === 'yes' ? 'depends_on:\\n db:\\n condition: service_healthy' : ''}\n networks:\n - {{appName}}-network\n restart: unless-stopped\n healthcheck:\n test: [\"CMD\", \"curl\", \"-f\", \"http://localhost:{{exposedPort}}/health\"]\n interval: 30s\n timeout: 3s\n retries: 3\n start_period: 10s\n\n${needsDatabase === 'yes' ? ` db:\n image: postgres:16-alpine\n container_name: {{appName}}-db\n environment:\n POSTGRES_DB: {{appName}}\n POSTGRES_USER: postgres\n POSTGRES_PASSWORD: postgres\n ports:\n - \"5432:5432\"\n volumes:\n - postgres-data:/var/lib/postgresql/data\n networks:\n - {{appName}}-network\n restart: unless-stopped\n healthcheck:\n test: [\"CMD-SHELL\", \"pg_isready -U postgres\"]\n interval: 10s\n timeout: 5s\n retries: 5` : ''}\n\nnetworks:\n {{appName}}-network:\n driver: bridge\n\n${needsDatabase === 'yes' ? 'volumes:\\n postgres-data:' : ''}\n```\n\n### .dockerignore\n**Location:** `.dockerignore`\n\n```\n# Git\n.git\n.gitignore\n.gitattributes\n\n# Docker\nDockerfile*\ndocker-compose*\n.dockerignore\n\n# Documentation\nREADME.md\ndocs/\n*.md\n\n# IDE\n.vs/\n.vscode/\n.idea/\n*.swp\n*.swo\n\n# Build artifacts\n**/bin/\n**/obj/\n**/node_modules/\n**/dist/\n**/target/\n*.log\n\n# Test files\n**/tests/\n**/*.test.*\n**/*.spec.*\n\n# CI/CD\n.github/\n.gitlab-ci.yml\nazure-pipelines.yml\n```\n\n## 3. Kubernetes Manifests\n\n### deployment.yaml\n**Location:** `k8s/deployment.yaml`\n\n```yaml\napiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: {{appName}}\n labels:\n app: {{appName}}\n version: v1\nspec:\n replicas: 3\n selector:\n matchLabels:\n app: {{appName}}\n template:\n metadata:\n labels:\n app: {{appName}}\n version: v1\n spec:\n securityContext:\n runAsNonRoot: true\n runAsUser: 1000\n fsGroup: 1000\n containers:\n - name: {{appName}}\n image: {{registry}}/{{appName}}:latest\n imagePullPolicy: Always\n ports:\n - containerPort: {{exposedPort}}\n protocol: TCP\n env:\n - name: ASPNETCORE_ENVIRONMENT\n value: \"Production\"\n - name: ASPNETCORE_URLS\n value: \"http://+:{{exposedPort}}\"\n ${needsDatabase === 'yes' ? '- name: ConnectionStrings__DefaultConnection\\n valueFrom:\\n secretKeyRef:\\n name: ' + appName + '-secrets\\n key: db-connection-string' : ''}\n resources:\n requests:\n cpu: 100m\n memory: 128Mi\n limits:\n cpu: 500m\n memory: 512Mi\n livenessProbe:\n httpGet:\n path: /health\n port: {{exposedPort}}\n initialDelaySeconds: 30\n periodSeconds: 10\n timeoutSeconds: 3\n failureThreshold: 3\n readinessProbe:\n httpGet:\n path: /health/ready\n port: {{exposedPort}}\n initialDelaySeconds: 10\n periodSeconds: 5\n timeoutSeconds: 3\n failureThreshold: 3\n securityContext:\n allowPrivilegeEscalation: false\n readOnlyRootFilesystem: true\n runAsNonRoot: true\n capabilities:\n drop:\n - ALL\n```\n\n### service.yaml\n**Location:** `k8s/service.yaml`\n\n```yaml\napiVersion: v1\nkind: Service\nmetadata:\n name: {{appName}}\n labels:\n app: {{appName}}\nspec:\n type: ClusterIP\n selector:\n app: {{appName}}\n ports:\n - name: http\n port: 80\n targetPort: {{exposedPort}}\n protocol: TCP\n```\n\n### ingress.yaml\n**Location:** `k8s/ingress.yaml`\n\n```yaml\napiVersion: networking.k8s.io/v1\nkind: Ingress\nmetadata:\n name: {{appName}}\n annotations:\n cert-manager.io/cluster-issuer: letsencrypt-prod\n nginx.ingress.kubernetes.io/ssl-redirect: \"true\"\nspec:\n ingressClassName: nginx\n tls:\n - hosts:\n - {{appName}}.example.com\n secretName: {{appName}}-tls\n rules:\n - host: {{appName}}.example.com\n http:\n paths:\n - path: /\n pathType: Prefix\n backend:\n service:\n name: {{appName}}\n port:\n number: 80\n```\n\n### configmap.yaml\n**Location:** `k8s/configmap.yaml`\n\n```yaml\napiVersion: v1\nkind: ConfigMap\nmetadata:\n name: {{appName}}-config\ndata:\n app-settings: |\n {\n \"Logging\": {\n \"LogLevel\": {\n \"Default\": \"Information\",\n \"Microsoft.AspNetCore\": \"Warning\"\n }\n }\n }\n```\n\n### secrets.yaml (Template)\n**Location:** `k8s/secrets.yaml.template`\n\n```yaml\napiVersion: v1\nkind: Secret\nmetadata:\n name: {{appName}}-secrets\ntype: Opaque\nstringData:\n ${needsDatabase === 'yes' ? 'db-connection-string: \"REPLACE_WITH_ACTUAL_CONNECTION_STRING\"' : 'api-key: \"REPLACE_WITH_ACTUAL_API_KEY\"'}\n```\n\n## 4. Build & Run Scripts\n\n### build.sh\n**Location:** `scripts/build.sh`\n\n```bash\n#!/bin/bash\nset -e\n\nAPP_NAME=\"{{appName}}\"\nREGISTRY=\"{{registry}}\"\nVERSION=\"{{version}}\"\n\necho \"Building Docker image...\"\ndocker build -t {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} .\n\necho \"Tagging as latest...\"\ndocker tag {{REGISTRY}}/{{APP_NAME}}:{{VERSION}} {{REGISTRY}}/{{APP_NAME}}:latest\n\necho \"Build complete!\"\necho \"Image: {{REGISTRY}}/{{APP_NAME}}:{{VERSION}}\"\n```\n\n### deploy.sh\n**Location:** `scripts/deploy.sh`\n\n```bash\n#!/bin/bash\nset -e\n\nAPP_NAME=\"{{appName}}\"\nNAMESPACE=\"{{namespace}}\"\n\necho \"Applying Kubernetes manifests...\"\nkubectl apply -f k8s/configmap.yaml -n {{NAMESPACE}}\nkubectl apply -f k8s/secrets.yaml -n {{NAMESPACE}}\nkubectl apply -f k8s/deployment.yaml -n {{NAMESPACE}}\nkubectl apply -f k8s/service.yaml -n {{NAMESPACE}}\nkubectl apply -f k8s/ingress.yaml -n {{NAMESPACE}}\n\necho \"Waiting for deployment to be ready...\"\nkubectl rollout status deployment/{{APP_NAME}} -n {{NAMESPACE}}\n\necho \"Deployment complete!\"\n```\n\n## Quality Checklist\n- [ ] Multi-stage Dockerfile with minimal runtime image\n- [ ] Non-root user in container (security)\n- [ ] Health checks configured\n- [ ] .dockerignore excludes build artifacts\n- [ ] docker-compose.yml with networks and volumes\n- [ ] Kubernetes manifests with resource limits\n- [ ] Liveness and readiness probes\n- [ ] Security context (no privilege escalation)\n- [ ] ConfigMaps for configuration\n- [ ] Secrets for sensitive data (template only)\n- [ ] Build and deploy scripts executable\n\nGenerate complete Docker setup following DevOps best practices.", "variables": [ "appName", "appType", "runtime", "exposedPort", "needsDatabase", "registry", "version", "REGISTRY", "APP_NAME", "VERSION", "namespace", "NAMESPACE" ], "notes": "Generate Docker multi-stage build setup with docker-compose and Kubernetes manifests Mode: ask. Tools: codebase, search, findFiles, readFile.", "metadata": { "source": { "provider": "github-prompts", "repository": "https://github.com/ThiagoGuislotti/copilot-instructions", "path": ".github/prompts/create-docker-setup.prompt.md", "ref": "1030c1a5e090435df1944794544dc5fd6f16d2e5", "url": "https://github.com/ThiagoGuislotti/copilot-instructions/blob/1030c1a5e090435df1944794544dc5fd6f16d2e5/.github/prompts/create-docker-setup.prompt.md", "key": "ThiagoGuislotti/copilot-instructions/.github/prompts/create-docker-setup.prompt.md" } } }

create-docker-setup

About

Create Docker Setup

Instructions

Input Variables

1. Multi-Stage Dockerfile

.NET API

Node.js SPA (Vue/Quasar)

Rust Application

2. Docker Compose

docker-compose.yml

.dockerignore

3. Kubernetes Manifests

deployment.yaml

service.yaml

ingress.yaml

configmap.yaml

secrets.yaml (Template)

4. Build & Run Scripts

build.sh

deploy.sh

Quality Checklist

Use it

Manifest

Reviews