security hardening

2026-05-31 09:35:31 +02:00
parent d7d437a871
commit 01b4734477
31 changed files with 1234 additions and 238 deletions
@@ -8,9 +8,24 @@ node_modules
 !.env.production.example
 prisma/dev.sqlite
 prisma/dev.sqlite-journal
+# Any local SQLite DB / journal / WAL must never enter the image.
+prisma/*.sqlite*
+prisma/dev.sqlite*
+data/
 .shopify
 .git
 .github
 *.log
 extensions/*/dist

+# Dev-only tooling / docs — not needed at build or runtime.
+# NOTE: prisma/schema.prisma and prisma/migrations are intentionally NOT
+# excluded (required by `prisma generate` and `prisma migrate deploy`).
+tests/
+scripts/
+.cursor/
+.gemini/
+.vscode/
+*.md
+**/*.md
+