# Never bake state or secrets into the image.
# Mirrors .gitignore: anything under data/, conf/, secrets/ or backups/ is runtime state or
# key material. The image must be buildable from image/, nothing else.
data/
conf/
conf-dc2/
secrets/
backups/
*.tgz
*.tar.bz2
*.sha256
*.key
*.crt
*.pem
*.p12
*.pfx
.env
.env.*
.git/
.gitignore
__pycache__/
*.log
*.tmp