From bfa041eb978ffc090d309e55c67e0ef5b38887f4 Mon Sep 17 00:00:00 2001
From: Julien Calixte <julien.calixte@theodo.com>
Date: Tue, 5 May 2026 14:07:35 +0200
Subject: [PATCH] chore: add dockerignore for scripts, local artifacts, and env
 files

The image previously inherited everything from a `COPY . .`, including
.env (secrets), local notes.db copies, and admin scripts that should
not run in prod containers.
---
 .dockerignore | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 .dockerignore

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..71d46bb
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,25 @@
+# version control / editor / OS
+.git/
+.gitignore
+.github/
+.idea/
+.vscode/
+.DS_Store
+
+# local SQLite + sidecars (DB lives at /data in the container)
+*.db
+*.db-shm
+*.db-wal
+*.db-journal
+remote-db/
+
+# secrets — provide via the orchestrator's env config, not baked into the image
+.env
+.env.*
+
+# admin / dev-only scripts (run locally, not in prod containers)
+scripts/
+
+# logs and caches
+*.log
+.cache/