# Keep secrets and local state out of the Docker build context.
#
# .env in particular: the Dockerfile does not COPY it today, but it was still
# being sent to the daemon on every build. A key that reaches an image is a key
# that leaks with the image.
.env
.env.*
!.env.example

# Build output and local runtime state — large, and rebuilt inside the image.
target/
logs/
uploads/
legacy-import/backup/

.git/
.gitignore
*.md
!README.md
