# Match what `go build` actually needs; everything else bloats the # build context and slows COPY . . to a crawl. bin/ out/ .git/ .github/ .idea/ .vscode/ *.swp *.swo # Reality test outputs — regenerable, not needed in the image. reports/ data/ # Per-run smoke logs in /tmp obviously don't end up here, but defensive. *.log # Local config + secrets — must NEVER ship in an image. lakehouse.toml secrets-go.toml auth.env *.env # Editor swap files .DS_Store Thumbs.db # Existing systemd unit files don't belong in the container — the # image deploys via docker-compose, not systemd-inside-container. deploy/systemd/ # Reality-test JSON corpora are large + the multi_coord_stress # binary will reference them as files, but they get mounted at # runtime, not baked in. tests/reality/contracts/*.json