# What must never reach the image.
#
# The first two blocks are the ones that matter: a `data/` directory copied in
# would bake somebody's database, their uploads and their encrypted API keys
# into an image, and a `.env` would bake the key that decrypts them.
data/
*.db
*.db-wal
*.db-shm
*.db.old
*.db.old-wal
*.db.old-shm
backups/
*.tar.zst
*.tar.gz
restore-pending/
pre-restore-*/
.env
.env.*
lembas.env
# A local ComfyUI workflow kept beside the checkout; somebody's own, not the app's.
image_gen_base.json

# `.git` is excluded and that has a consequence worth knowing: /admin/updates
# reads it to say what is running, so inside a container that page says "not
# installed from a checkout" and offers nothing. That is correct -- a container
# is updated by rebuilding it from an updated checkout on the host
# (`git pull && docker compose up -d --build`), not by resetting one inside it.
.git/
.github/

.venv/
venv/
__pycache__/
*.pyc
.pytest_cache/
.ruff_cache/
htmlcov/
.coverage
dist/
build/
*.egg-info/
