# Whitelist build-context: only `server/` and `common/` go into the image.
# Cargo's path dep `server/Cargo.toml` -> `path = "../common"` requires
# both directories side by side, so we must include `common/` explicitly.
*
!server/
!common/

# Re-exclude artifacts inside the whitelisted dirs.
server/target/
common/target/
**/*.log
**/*.bk

# Secrets and operator-owned configs MUST NEVER end up in the image —
# they are bind-mounted at runtime from /opt/stacks/doctate-server/config/.
server/.env
server/users.toml
server/settings.toml