stack

name	stack
description	Generate a Docker Swarm stack file — services, deploy policy (replicas, placement, rolling update/rollback), overlay network.
user-invocable	true
argument-hint	<stack description> [--replicas <n>] [--with-db] [--with-proxy]

/stack — Generate a Swarm Stack File

Input examples

/stack .NET API + Angular + Postgres --replicas 3
/stack worker service --replicas 2 --with-db
/stack fullstack --with-proxy    (adds a Traefik front, see traefik-proxy-stack.yml)

Process

1. Detect the services and their dependency order.
2. For each service: base image (reuse docker-kit/docker-conventions.md for the Dockerfile side), deploy: stanza per swarm-conventions.md, healthcheck.
3. Sensitive values → reference an external: true secret, never an inline env var — see /secret.
4. Attach all services to a stack-scoped overlay network.
5. L1 approval → Write.

Mandatory rules

• deploy.replicas explicit for every service — never rely on the Swarm default of 1
• resources.limits + .reservations both set
• update_config + rollback_config both set — a rollout with no rollback plan is incomplete
• Secrets via docker secret — never plain env vars for passwords/keys/tokens
• Stateful services (db, anything with local volume) get placement.constraints
• No inline Ingress — routing by hostname needs a proxy front (--with-proxy), Swarm has no Ingress resource

Output

docker-stack.yml
.env.example              (placeholders only — real secrets are never written to a file the agent generates)

References

• @.claude/rules/swarm-conventions.md
• @../../docker-kit/.claude/rules/docker-conventions.md