maxfield
f14db3a229
All checks were successful
Deploy Docker Images / Build, push, and deploy (push) Successful in 22m59s
Prove DNS zone ownership with per-zone TXT tokens and reserved operator domains, harden auth/mail/VPN/edge paths against the remaining audit findings, and tighten deploy/config hygiene so self-host defaults and CI cannot reintroduce the same failure modes.
72 lines
1.6 KiB
Text
72 lines
1.6 KiB
Text
# This file excludes paths from the Docker build context.
|
|
#
|
|
# By default, Docker's build context includes all files (and folders) in the
|
|
# current directory. Even if a file isn't copied into the container it is still sent to
|
|
# the Docker daemon.
|
|
#
|
|
# There are multiple reasons to exclude files from the build context:
|
|
#
|
|
# 1. Prevent nested folders from being copied into the container (ex: exclude
|
|
# /assets/node_modules when copying /assets)
|
|
# 2. Reduce the size of the build context and improve build time (ex. /build, /deps, /doc)
|
|
# 3. Avoid sending files containing sensitive information
|
|
#
|
|
# More information on using .dockerignore is available here:
|
|
# https://docs.docker.com/engine/reference/builder/#dockerignore-file
|
|
|
|
.dockerignore
|
|
|
|
# Ignore git, but keep git HEAD and refs to access current commit hash if needed:
|
|
#
|
|
# $ cat .git/HEAD | awk '{print ".git/"$2}' | xargs cat
|
|
# d0b8727759e1e0e7aa3d41707d12376e373d5ecc
|
|
.git
|
|
!.git/HEAD
|
|
!.git/refs
|
|
|
|
# Common development/test artifacts
|
|
/cover/
|
|
/doc/
|
|
/test/
|
|
/tmp/
|
|
.elixir_ls
|
|
|
|
# Environment files and local secrets must never be sent to the Docker daemon.
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
env/*.env
|
|
env/*.env.*
|
|
|
|
# Private key and certificate material
|
|
*.key
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
*.crt
|
|
*.csr
|
|
*.asc
|
|
/certs/
|
|
/secrets/
|
|
/.onion-vanity/
|
|
|
|
# Mix artifacts
|
|
/_build/
|
|
/deps/
|
|
apps/**/_build/
|
|
apps/**/deps/
|
|
*.ez
|
|
|
|
# Generated on crash by the VM
|
|
erl_crash.dump
|
|
|
|
# Static artifacts - These should be fetched and built inside the Docker image
|
|
/assets/node_modules/
|
|
/priv/static/assets/
|
|
/priv/static/cache_manifest.json
|
|
apps/**/assets/node_modules/
|
|
apps/**/priv/static/assets/
|
|
apps/**/priv/static/cache_manifest.json
|
|
|
|
# Local release artifacts
|
|
/_deploy_release/
|