# ─────────────────────────────────────────────────────────────────
# .dockerignore — keep the build context small and secret-free.
#
# Critical: without this file the whole local working tree is sent to
# the Docker daemon, including .env.local (PB_TOKEN, CIPC passwords),
# node_modules and the full .git history.
# ─────────────────────────────────────────────────────────────────

# --- secrets: never let these reach the build context ---------------
.env
.env.*
!.env.example

# --- deps, build output, git history ----------------------------------
node_modules
.next
out
dist
build
*.tsbuildinfo
.git
.gitignore
.gitattributes

# --- logs & runtime state --------------------------------------------
*.log
*.log.err
*.tmp
.runtime
.dev-screenshots
npm-debug.log*

# --- local databases --------------------------------------------------
*.sqlite
*.sqlite3
*.db

# --- secrets inside scripts/ ------------------------------------------
# Playwright storage state = live CIPC/SARS session cookies.
scripts/storage_state.json

# --- scratch, compiled python, debug artefacts ------------------------
__pycache__
**/__pycache__
*.py[cod]
*.bin
scripts/.scratch
scripts/_scratch
scripts/_backup_ufc_docs
scripts/_*.png
scripts/sars_login_*.png
scripts/_upload_probe.pdf
_probe*.json
_junction_backup*.json

# --- docs, samples and one-off probes (not needed to serve the app) ---
docs
scratch-*
Sample_*.docx
Sample_*.pdf
*.preview-p*.png
.preview-p*.png
workpage*.png
desktop.ini
Thumbs.db
*.bak
*.bak.*