jonvdveenandClaude Opus 4.8
f0c3b44778
.dockerignore did not list .env, so `docker build` copied any local .env — credentials included — into the image build context (and into the image wherever the Dockerfile does a broad `COPY . .`). Anyone building the image with a populated .env present would bake their secrets into the resulting image layers. Add `.env` and `.env.*.local` to .dockerignore so local environment files never enter the build context. Runtime configuration is still supplied the intended way — environment variables / an env_file at `docker run` / compose time — so nothing about normal deployment changes. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
9 lines
90 B
Plaintext
9 lines
90 B
Plaintext
Dockerfile
|
|
.dockerignore
|
|
node_modules
|
|
npm-debug.log
|
|
README.md
|
|
.next
|
|
.git
|
|
.env
|
|
.env.*.local |