# Build output & IDE/VCS noise (keeps the build context small) target/ .git/ .gitattributes .gitignore .mvn/ mvnw mvnw.cmd .settings/ .classpath .project .factorypath .springBeans .sts4-cache/ .idea/ *.iml *.iws *.ipr .vscode/ HELP.md Dockerfile .dockerignore # NEVER bake secrets into the image — pass them at runtime (--env-file .env) .env **/.env