# Build context of server/Dockerfile: the repository root (D-132, SPEC §10.3). An allowlist, so the Android project,
# the docs, the screenshot goldens, worktrees and secrets never enter the context (it stays a few MB).
# infra/backup/Dockerfile builds from its own directory and does not read this file.
*
!server
!web
!contracts
# Inside the allowed directories: build output, local data, dependencies and anything secret.
server/target
server/data
web/node_modules
web/dist
**/*.sqlite*
**/*.db
**/*.apk
**/*.pem
**/.env
**/.env.*
**/.DS_Store