RECORDGOD/.dockerignore
type-two 9e3c132a11 chore(security): purge distro raw dumps (supplier PII + account JWT) from git + image
The RareWaves/Inertia scrapes (rarw*.txt, inertia.txt, the SOH .xlsx) were tracked
in git AND baked into the Docker image (COPY . . with no exclusion). They carry a live
RareWaves buyer JWT and a supplier contact email — they don't belong in either.

- git rm --cached the 7 dumps; moved to local-only ingest_raw/
- .gitignore + .dockerignore: ingest_raw/, rarw*.txt, inertia.txt, *.xlsx
- nothing reads them by path (the xlsx ingest takes a base64 upload), so no code change

NOTE: still present in history (ef37063, 926468a) — scrub separately if the JWT is live.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 15:15:43 +10:00

15 lines
365 B
Plaintext

.venv/
.git/
__pycache__/
*.pyc
.env
disc_images/
# NOTE: do NOT exclude webstore/ — main.py mounts /store from it (the 3D virtual store).
# Only disc_images/ (~900MB, volume-mounted at runtime) is worth excluding from the build context.
*.md
# distro raw dumps — never bake supplier PII / account tokens into the image
ingest_raw/
rarw*.txt
inertia.txt
*.xlsx