# Keep the build context small and free of secrets / local state. .git .gitea .venv venv env ENV __pycache__ *.py[cod] *.egg-info build dist downloads wheels .pytest_cache .ruff_cache .mypy_cache htmlcov .coverage .coverage.* coverage.xml .cache # Secrets / local config — never bake into an image. .env .env.* !.env.example # Local docs site / editor cruft site .idea .vscode # Never ship the encrypted token store or audit log into the image. data *.enc