Generate a production-ready Docker Compose stack from a natural language description or stack type. Includes security best practices: resource limits, healthchecks, restart policies, non-root users, named volumes. Optionally adds Traefik v3 labels for reverse proxy + HTTPS.

Audit a Docker Compose YAML string for security vulnerabilities and best-practice violations. Checks: privileged mode, root user, docker socket mounts, plaintext secrets, exposed database ports, missing restart policies, missing resource limits, unpinned image tags, missing healthchecks, and depends_on readiness issues. Returns a score (0-100) and categorized issues (critical/warning/info).

Generate Traefik v3 labels for a Docker service. Produces ready-to-paste labels for docker-compose.yml and a networks section. Supports TLS (Let's Encrypt), HTTP→HTTPS redirect, and optional middleware presets: rate-limit, security-headers, auth-basic, compress.

List all available Docker Compose stack templates with descriptions and tags.

[PRO] Generate an optimized, security-hardened multi-stage Dockerfile. Supports Node.js (including Next.js standalone), Python (FastAPI/Django), and Go. Features: multi-stage builds, non-root user, minimal final image, HEALTHCHECK.

[PRO] Extract all environment variable placeholders (${VAR}) from a Docker Compose YAML and generate a .env template file with categorized comments (database, auth/secrets, app). Includes generation hints for secrets.