# keep the build context small — the repo carries a full Go toolchain, the # whisper.cpp source tree, and ~1GB of models that must NOT ship in the image. .git models *.db certs # built binaries (rebuilt inside the image) /mavend /mavsttd /mavttsd /mavweb /mavpoll /mavcaldav /mavenclient # heavy deps we don't need in context. We keep only the prebuilt runtime libs # (deps/lib, deps/piper) and the headers the CGO build needs. deps/go deps/onnxruntime-linux-x64-* deps/whisper.cpp/** !deps/whisper.cpp !deps/whisper.cpp/ggml !deps/whisper.cpp/ggml/include !deps/whisper.cpp/ggml/include/** # local secrets — never bake into an image layer deploy/db_key.env