stacklisted

# /stack — Generate a Swarm Stack File ## Input examples ``` /stack .NET API + Angular + Postgres --replicas 3 /stack worker service --replicas 2 --with-db /stack fullstack --with-proxy (adds a Traefik front, see traefik-proxy-stack.yml) ``` ## Process 1. Detect the services and their dependency order. 2. For each service: base image (reuse `docker-kit/docker-conventions.md` for the Dockerfile side), `deploy:` stanza per `swarm-conventions.md`, healthcheck. 3. Sensitive values → reference an `external: true` secret, never an inline env var — see `/secret`. 4. Attach all services to a stack-scoped overlay network. 5. L1 approval → Write. ## Mandatory rules - **`deploy.replicas` explicit** for every service — never rely on the Swarm default of 1 - **`resources.limits` + `.reservations`** both set - **`update_config` + `rollback_config`** both set — a rollout with no rollback plan is incomplete - **Secrets via `docker secret`** — never plain env vars for passwords/keys/tokens - **Stateful services** (db, anything with local volume) get `placement.constraints` - **No inline Ingress** — routing by hostname needs a proxy front (`--with-proxy`), Swarm has no Ingress resource ## Output ``` docker-stack.yml .env.example (placeholders only — real secrets are never written to a file the agent generates) ``` ## References - @.claude/rules/swarm-conventions.md - @../../docker-kit/.claude/rules/docker-conventions.md