# Build outputs and deps — rebuilt inside the image
**/bin
**/obj
**/node_modules
**/dist
publish/

# Local config & secrets — never bake into the image. Includes the client's
# .env.local etc.: vite reads them at build time, so a developer's
# VITE_E2E_FAKE_AUTH=1 would otherwise ship a bundle that skips sign-in.
**/appsettings.Production.json
**/appsettings.*.local.json
**/.env
**/.env.*

# Source control / IDE / docs
.git
.gitignore
.vs
.vscode
*.md
docs/

# Data Protection keys / runtime artifacts
keys/
