# Applied when the repo root is the Docker build context (e.g. # `docker build -f docker/remote-agent/Dockerfile -t sha-remote-agent .`). # Keep this file conservative — new Dockerfiles that live under docker/ # will share it. # --- Never bake secrets into an image --- .env .env.* !.env.example tokens/ *.tokens.json *.pem *.key # --- Never ship local dev artifacts --- node_modules/ coverage/ .nyc_output/ logs/ *.log # --- Version control / IDE noise --- .git/ .gitignore .gitattributes .vscode/ .idea/ *.swp *.swo .DS_Store # --- Test suites are not needed at runtime --- tests/ # --- Docs / meta files that only matter in the repo --- README.md docs/ *.md !docker/**/README.md # --- Nested Docker artifacts (don't recursively bring in other # containers' contexts if more are added later) --- docker/**/node_modules/ docker/**/.env # Packaging output (potentially large tarballs) — never send back into a build. docker/**/dist/