FilesExpand file tree

main

/

.dockerignore

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

59 lines (55 loc) · 2.23 KB

main

/

.dockerignore

Copy path

Top

File metadata and controls

• Code
• Blame

59 lines (55 loc) · 2.23 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

# Build context for docker/Dockerfile.prod (repo root). Keeps the

# production image reproducible from environment variables instead of

# accidentally baking in whatever a contributor's local dev stack wrote

# to disk.

#

# web/config.php is the load-bearing exclusion here: docker/php/dev-*

# generates it for the local `./sbpp.sh up` stack (DB_HOST=db, dev

# creds) and it is gitignored but NOT excluded from the docker build

# context by default. Without this file, `docker build -f

# docker/Dockerfile.prod .` copies that dev config.php straight into

# the image (Dockerfile.prod's builder stage does `COPY web/

# /build/web/` with no filtering), so every container started from the

# image already has a "config.php present" sentinel pointing at the

# dev stack's internal hostname 'db' -- the prod entrypoint's

# render_config step sees the file already exists and never writes the

# real DATABASE_URL / DB_* values, regardless of what the operator

# configures. Symptom: SQLSTATE[HY000] [2002] getaddrinfo for db

# failed, reproducible on a freshly created service with correct env

# vars because the bug ships inside the image, not in any runtime

# volume.

#

# Also exclude editor / backup suffixes (config.php.bak, .old, …). Those

# often carry the same DB + JWT secrets and are NOT denied by a bare

# `<Files "config.php">` Apache rule. Keep config.php.template — it is

# the documented blank for tarball / non-Docker installs.

web/config.php

web/config.php.*

!web/config.php.template

# Host-side env files (repo root or under web/). Never meaningful inside

# the runtime image; a stray `web/.env` would otherwise COPY in with

# credentials.

.env

.env.*

**/.env

**/.env.*

# Regenerated by the builder stage's `composer install`; shipping the

# host's (possibly dev-only, possibly stale) vendor tree would both

# bloat the build context and risk skew from what composer.lock pins.

web/includes/vendor/

# Runtime-writable directories the Dockerfile pre-creates empty and

# the compose file bind-mounts volumes over. Never meaningful to ship

# from the host.

web/cache/

web/templates_c/

web/demos/

# Never ship VCS metadata or host-side tooling artifacts into the

# build context.

.git/

.github/

docs/

game/

node_modules/

web/node_modules/

web/tests/e2e/node_modules/

*.log