Dockcrate

Dockerfile, docker-compose and CI/CD pipeline generator for a new project. Pick a stack, preview the files, then copy or download them. Nothing is stored on the server; your choices are kept in this browser.

Jump to preview ↓

Files to generateDockerfile (+ nginx.conf for static sites).dockerignoreDocker Compose (+ .env.example)CI/CD pipelineExtra project files (choose below; none by default)

Extra project files

Optional; none by default.

Dependency updates (Dependabot, or Renovate off GitHub)Dev container (.devcontainer/devcontainer.json)Makefile with docker and compose shortcuts.editorconfig

Stack

or

Project nameNames the images and the deployed resources.

Package manager

Has a build step (TypeScript, Next.js, Nest…)

Port

Runtime

Services in compose

None

postgresmysqlmariadbmongoredismemcachedelasticsearchmailpitrabbitmq

Databases and queues.

Image build

Base imagealpine is the smallest; slim is Debian-based and avoids musl surprises. Default: what each stack normally uses.

Multi-stage build (recommended: build tools stay out of the final image)

Networks (0)

None declared: every service is on compose’s one default network.

Environments

None

dev (Dockerfile.dev, source mounted, live reload)qastagingprod

A compose override per environment, layered over the base file. dev also gets a Dockerfile.dev with live reload.

Container

Compose restart policyApplied to every service in the compose file.

Healthcheck pathAdds a HEALTHCHECK probing this path.

OS packages

None

curlwgetca-certificatestinibashgitopenssltzdata

Installed in the runtime image (apk/apt names).

Environment variablesOne NAME=value per line, baked into the image. No secrets.

Build argsNAME or NAME=default per line (VITE_API_URL, NEXT_PUBLIC_*). Passed to the build in compose and CI.

CI/CD

Provider

Pipeline name

Test job (untick to generate no test job)

Steps in the test job

Defaults to what the project defines.

LintTestsBuildDependency audit

Runtime versions to test

None

18202224

One matrix entry per version. None = the project's own version.

Test on operating systems

Default runner

ubuntu-latestubuntu-24.04ubuntu-22.04windows-latestwindows-2022macos-latestmacos-14

Service containers for tests

None

postgresmysqlmariadbmongoredismemcachedelasticsearchmailpitrabbitmq

Started next to the test job.

When the pipeline runs

Tick every event that should start it. Each one is independent: a manual-only pipeline needs no push.

A push to a branch

Branches

main

mainmasterdevelopstagingproductionrelease/*hotfix/*feature/*

Globs allowed (release/*).

Never run for branches

None

gh-pagesdependabot/**renovate/**wip/*

A tag is pushed

Pipeline settings

Concurrency

Runner / agentGitHub runs-on label, Azure vmImage or Jenkins agent label.

Job timeout

Pipeline environment variablesOne NAME=value per line, set for every job. No secrets.

Cancel the rest of a matrix when one entry fails (fail-fast)Cache dependenciesPin actions to commit SHAs (recommended; a tag can be moved after the fact)

Token permissions

Base permissions only

actions: readactions: writechecks: readchecks: writecontents: readcontents: writedeployments: readdeployments: writeissues: readissues: writepackages: readpackages: writepull-requests: readpull-requests: writesecurity-events: readsecurity-events: writestatuses: readstatuses: writeattestations: writeid-token: write (OIDC login to the cloud)

contents: read is always the base.

Image publishing

Image tags

Besides the commit sha, which is always pushed.

Branch nameGit tagSemantic version from the tag (1.2.3, 1.2)latest (default branch)

Image platforms

linux/amd64

linux/amd64linux/arm64linux/arm/v7linux/386linux/ppc64lelinux/s390x

Docker layer cache

Security & quality

Scan the image for vulnerabilities (Trivy)Lint the Dockerfile (Hadolint; fails on errors)Static code analysis (CodeQL)SBOM and provenance attestations (attached to the image)Sign the image (cosign, keyless via GitHub OIDC)

Deployment

Deploy to

Image registry

Back to options ↑

Generating the files…

Guides

Dockerfile generator
Docker Compose generator
GitHub Actions workflow generator
CI/CD pipeline generator

Dockcrate

Loading Dockcrate…

Jump to preview ↓

Loading the form…

Back to options ↑

Generating the files…

Skip to preview

Dockcrate

Dockerfile, docker-compose and CI/CD pipeline generator for a new project. Pick a stack, preview the files, then copy or download them. Nothing is stored on the server; your choices are kept in this browser.

Jump to preview ↓

Files to generateDockerfile (+ nginx.conf for static sites).dockerignoreDocker Compose (+ .env.example)CI/CD pipelineExtra project files (choose below; none by default)

Extra project files

Optional; none by default.

Dependency updates (Dependabot, or Renovate off GitHub)Dev container (.devcontainer/devcontainer.json)Makefile with docker and compose shortcuts.editorconfig

Stack

or

Project nameNames the images and the deployed resources.

Package manager

Has a build step (TypeScript, Next.js, Nest…)

Port

Runtime

Services in compose

None

postgresmysqlmariadbmongoredismemcachedelasticsearchmailpitrabbitmq

Databases and queues.

Image build

Base imagealpine is the smallest; slim is Debian-based and avoids musl surprises. Default: what each stack normally uses.

Multi-stage build (recommended: build tools stay out of the final image)

Networks (0)

None declared: every service is on compose’s one default network.

Environments

None

dev (Dockerfile.dev, source mounted, live reload)qastagingprod

A compose override per environment, layered over the base file. dev also gets a Dockerfile.dev with live reload.

Container

Compose restart policyApplied to every service in the compose file.

Healthcheck pathAdds a HEALTHCHECK probing this path.

OS packages

None

curlwgetca-certificatestinibashgitopenssltzdata

Installed in the runtime image (apk/apt names).

Environment variablesOne NAME=value per line, baked into the image. No secrets.

Build argsNAME or NAME=default per line (VITE_API_URL, NEXT_PUBLIC_*). Passed to the build in compose and CI.

CI/CD

Provider

Pipeline name

Test job (untick to generate no test job)

Steps in the test job

Defaults to what the project defines.

LintTestsBuildDependency audit

Runtime versions to test

None

18202224

One matrix entry per version. None = the project's own version.

Test on operating systems

Default runner

ubuntu-latestubuntu-24.04ubuntu-22.04windows-latestwindows-2022macos-latestmacos-14

Service containers for tests

None

postgresmysqlmariadbmongoredismemcachedelasticsearchmailpitrabbitmq

Started next to the test job.

When the pipeline runs

Tick every event that should start it. Each one is independent: a manual-only pipeline needs no push.

A push to a branch

Branches

main

mainmasterdevelopstagingproductionrelease/*hotfix/*feature/*

Globs allowed (release/*).

Never run for branches

None

gh-pagesdependabot/**renovate/**wip/*

A tag is pushed

Pipeline settings

Concurrency

Runner / agentGitHub runs-on label, Azure vmImage or Jenkins agent label.

Job timeout

Pipeline environment variablesOne NAME=value per line, set for every job. No secrets.

Cancel the rest of a matrix when one entry fails (fail-fast)Cache dependenciesPin actions to commit SHAs (recommended; a tag can be moved after the fact)

Token permissions

Base permissions only

actions: readactions: writechecks: readchecks: writecontents: readcontents: writedeployments: readdeployments: writeissues: readissues: writepackages: readpackages: writepull-requests: readpull-requests: writesecurity-events: readsecurity-events: writestatuses: readstatuses: writeattestations: writeid-token: write (OIDC login to the cloud)

contents: read is always the base.

Image publishing

Image tags

Besides the commit sha, which is always pushed.

Branch nameGit tagSemantic version from the tag (1.2.3, 1.2)latest (default branch)

Image platforms

linux/amd64

linux/amd64linux/arm64linux/arm/v7linux/386linux/ppc64lelinux/s390x

Docker layer cache

Security & quality

Scan the image for vulnerabilities (Trivy)Lint the Dockerfile (Hadolint; fails on errors)Static code analysis (CodeQL)SBOM and provenance attestations (attached to the image)Sign the image (cosign, keyless via GitHub OIDC)

Deployment

Deploy to

Image registry

Back to options ↑

Generating the files…

Guides

Dockerfile generator
Docker Compose generator
GitHub Actions workflow generator
CI/CD pipeline generator