From aa55c29dbf146b64a4fe9c60bbd78735e6d30073 Mon Sep 17 00:00:00 2001
From: Jan Wagner <eldovsen@gmail.com>
Date: Sun, 16 Aug 2026 03:26:49 +0200
Subject: [PATCH] fix(deploy): keep VPS env files out of the portfolio image

Docker copied the host .env into the standalone image, which would
ship SMTP and admin credentials in the layer cache.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .dockerignore | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.dockerignore b/.dockerignore
index c550055..9e9b572 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -5,3 +5,7 @@ npm-debug.log
 README.md
 .next
 .git
+.env
+.env.*
+.codegraph
+data