marvinandClaude Sonnet 5
d634573dd6
Both use an allowlist so only the files each Dockerfile copies are sent to the build context. For caddy this keeps the TLS certificates and keys in data/ and config/ out of the context; for api it skips training code, datasets, saved models and caches. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
6 lines
208 B
Plaintext
6 lines
208 B
Plaintext
# Allowlist: only the Caddyfile is copied into the image.
|
|
# data/ and config/ hold TLS certificates and private keys at runtime
|
|
# (mounted as volumes) and must never end up in the build context.
|
|
*
|
|
!Caddyfile
|