vedetta/.dockerignore at main · MahdiHedhli/vedetta · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
# Build context for the Core backend is the repo root, but the backend image only
# needs backend/ and siem/migrations. Keep .git, local/secret material, build
# artifacts, and unrelated modules out of the build context (faster builds; and
# defense-in-depth so nothing local is ever sent to the Docker daemon).
.git
.gitignore
.github
.dockerignore
.local
*.env
!.env.example
# Pre-upgrade snapshots (scripts/upgrade.sh): DB tarballs + an .env copy with
# API tokens. **/*.db above catches the online snapshot but NOT the cold/aux
# *.tar.gz or env-*.bak — without this line every build after a snapshot ships
# them to the Docker daemon/BuildKit cache (secret exposure + huge contexts).
backups/
**/node_modules
**/dist
**/*.test
**/*.out
**/*.db
**/*.sqlite*
.claude
.cursor
.vscode
.idea
.DS_Store

# Modules / assets the backend image does not build from
frontend
collector
telemetry
threat-network
sensor
scripts
site
docs
specs
research
*.md