Use when writing or editing Dockerfile, docker-compose.yml, .dockerignore, or anything related to building and deploying the container. Enforces host network mode and single-container constraints.
network_mode: host — container shares host network stack; no ports: mappingprivileged: true — required for iptables execution inside container:8080 — Go binary serves both API and embedded React SPACGO_ENABLED=0 — use modernc.org/sqlite (pure-Go); no gcc needed