Docker Containerization and Docker Compose Orchestration for Production

Create the complete Docker configuration for [PROJECT NAME], composed of [SERVICE LIST: e.g. Next.js app, Node.js API, PostgreSQL, Redis, Nginx].\\\\\\\\n\\\\\\\\n**Context:**\\\\\\\\n- Dev environment: Mac M1/M2/M4 (ARM64)\\\\\\\\n- Production environment: VPS Linux (AMD64) with [RAM] memory\\\\\\\\n- Services: [DETAILED LIST]\\\\\\\\n- Persistent data volumes: [LIST]\\\\\\\\n\\\\\\\\n**1) Multi-stage Dockerfile for [MAIN APP]:**\\\\\\\\n\\\\\\\\\\\\\\\\\\\\\\\`\\\\\\\\\\\\\\\\\\\\\\\`\\\\\\\\\\\\\\\\\\\\\\\`dockerfile\\\\\\\\n# Stage 1: Dependencies\\\\\\\\n# Stage 2: Build\\\\\\\\n# Stage 3: Production (minimal image)\\\\\\\\n\\\\\\\\\\\\\\\\\\\\\\\`\\\\\\\\\\\\\\\\\\\\\\\`\\\\\\\\\\\\\\\\\\\\\\\`\\\\\\\\n- Optimized base image (alpine or distroless)\\\\\\\\n- Non-root user\\\\\\\\n- Complete .dockerignore\\\\\\\\n- Optimized layer caching (COPY package.json before code)\\\\\\\\n- Native Docker health check\\\\\\\\n- Labels with metadata (version, maintainer)\\\\\\\\n- Build args for compile-time variables\\\\\\\\n- Multi-platform: linux/amd64 + linux/arm64\\\\\\\\n\\\\\\\\n**2) docker-compose.yml (Development):**\\\\\\\\n- Hot reload with mounted volumes\\\\\\\\n- Mapped ports for local access\\\\\\\\n- depends_on with health checks\\\\\\\\n- Profiles for optional services (mailhog, adminer)\\\\\\\\n- Variables via .env file\\\\\\\\n\\\\\\\\n**3) docker-compose.prod.yml (Production):**\\\\\\\\n- No code volumes (self-contained image)\\\\\\\\n- Restart policies (unless-stopped)\\\\\\\\n- Resource limits (cpus, memory)\\\\\\\\n- Configured logging driver (json-file with rotation)\\\\\\\\n- Isolated networks (frontend, backend, database)\\\\\\\\n- Secrets management (Docker secrets or encrypted .env)\\\\\\\\n\\\\\\\\n**4) Reverse Proxy (Nginx or Traefik):**\\\\\\\\n- Automatic HTTPS with Let's Encrypt\\\\\\\\n- Gzip/Brotli compression\\\\\\\\n- Rate limiting\\\\\\\\n- Security headers\\\\\\\\n- WebSocket support (if needed)\\\\\\\\n\\\\\\\\n**5) Helper Scripts:**\\\\\\\\n- \\\\\\\\\\\\\\\\\\\\\\\`make dev\\\\\\\\\\\\\\\\\\\\\\\` — start development environment\\\\\\\\n- \\\\\\\\\\\\\\\\\\\\\\\`make build\\\\\\\\\\\\\\\\\\\\\\\` — production build\\\\\\\\n- \\\\\\\\\\\\\\\\\\\\\\\`make deploy\\\\\\\\\\\\\\\\\\\\\\\` — zero-downtime deployment (rolling update)\\\\\\\\n- \\\\\\\\\\\\\\\\\\\\\\\`make backup\\\\\\\\\\\\\\\\\\\\\\\` — data volume backups\\\\\\\\n- \\\\\\\\\\\\\\\\\\\\\\\`make logs\\\\\\\\\\\\\\\\\\\\\\\` — aggregated logs with service filtering\\\\\\\\n\\\\\\\\n**6) Security:**\\\\\\\\n- Image vulnerability scanning (Trivy/Snyk)\\\\\\\\n- Principle of least privilege\\\\\\\\n- Read-only filesystem where possible\\\\\\\\n- No extra capabilities\\\\\\\\n\\\\\\\\nProvide all complete files and a README with setup instructions.