# NOTE: .dockerignore does NOT use .gitignore semantics. It matches with
# Go's filepath.Match rules extended with `**`: `*` does not cross `/`,
# and an unprefixed pattern is anchored at the context root. So a bare
# `*.key` would exclude ./server.key but happily ship ./certs/server.key
# into the image, and a bare `node_modules` would exclude only a
# top-level one. Every depth-independent pattern below therefore carries
# an explicit `**/` prefix. The only unprefixed entries are the ones that
# are genuinely root-anchored: the repo's own .git, Hugo's output
# directories, and Hugo's build lock, all of which exist at the context
# root by definition.

# Repo and Hugo outputs (root-anchored on purpose)
.git
public
resources
.hugo_build.lock

# OS
**/.DS_Store
**/Thumbs.db

# Editors
**/*.swp
**/*.swo
**/*~
**/*.bak
**/.idea
**/.vscode
**/*.sublime-*

# Node
**/node_modules

# Environment / secrets
**/.env
**/.env.*
**/*.pem
**/*.key

# Agent tooling (holds worktrees/, i.e. entire additional checkouts)
**/.claude