- add .dockerignore: without it the build context shipped .env.local (PB_TOKEN + CIPC passwords), node_modules and the full .git history - bake NEXT_PUBLIC_PB_URL / NEXT_PUBLIC_BASE_URL / NEXT_PUBLIC_APP_URL as build args; NEXT_PUBLIC_PB_URL was read by client components but never supplied, so browser-side PocketBase calls would break - docker-compose: same build args + Telegram runtime env - document that agent-browser / PDFD sidecar routes stay on the PC
67 lines
No EOL
1.7 KiB
Text
67 lines
No EOL
1.7 KiB
Text
# ─────────────────────────────────────────────────────────────────
|
|
# .dockerignore — keep the build context small and secret-free.
|
|
#
|
|
# Critical: without this file the whole local working tree is sent to
|
|
# the Docker daemon, including .env.local (PB_TOKEN, CIPC passwords),
|
|
# node_modules and the full .git history.
|
|
# ─────────────────────────────────────────────────────────────────
|
|
|
|
# --- secrets: never let these reach the build context ---------------
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# --- deps, build output, git history ----------------------------------
|
|
node_modules
|
|
.next
|
|
out
|
|
dist
|
|
build
|
|
*.tsbuildinfo
|
|
.git
|
|
.gitignore
|
|
.gitattributes
|
|
|
|
# --- logs & runtime state --------------------------------------------
|
|
*.log
|
|
*.log.err
|
|
*.tmp
|
|
.runtime
|
|
.dev-screenshots
|
|
npm-debug.log*
|
|
|
|
# --- local databases --------------------------------------------------
|
|
*.sqlite
|
|
*.sqlite3
|
|
*.db
|
|
|
|
# --- secrets inside scripts/ ------------------------------------------
|
|
# Playwright storage state = live CIPC/SARS session cookies.
|
|
scripts/storage_state.json
|
|
|
|
# --- scratch, compiled python, debug artefacts ------------------------
|
|
__pycache__
|
|
**/__pycache__
|
|
*.py[cod]
|
|
*.bin
|
|
scripts/.scratch
|
|
scripts/_scratch
|
|
scripts/_backup_ufc_docs
|
|
scripts/_*.png
|
|
scripts/sars_login_*.png
|
|
scripts/_upload_probe.pdf
|
|
_probe*.json
|
|
_junction_backup*.json
|
|
|
|
# --- docs, samples and one-off probes (not needed to serve the app) ---
|
|
docs
|
|
scratch-*
|
|
Sample_*.docx
|
|
Sample_*.pdf
|
|
*.preview-p*.png
|
|
.preview-p*.png
|
|
workpage*.png
|
|
desktop.ini
|
|
Thumbs.db
|
|
*.bak
|
|
*.bak.* |