node_modules npm-debug.log Dockerfile .dockerignore .git .gitignore README.md .env .env.* data logs src/logs # Non-runtime directories (keeps prod images small and clean) archive downloads tools *.md # Any legacy secrets files — the app reads all credentials from env now. # Redacted config.json is still built; anything with secrets is excluded. config/config-test.json config/*.local.json config/secrets.json *.pem *.key credentials* secrets*