# keep the build context small — the repo carries a full Go toolchain, the # whisper.cpp source tree, and ~1GB of models that must NOT ship in the image. .git models *.db certs # built binaries (rebuilt inside the image) /mavend /mavsttd /mavttsd /mavweb /mavpoll /mavcaldav /mavenclient # heavy deps we don't need in context. We keep only the prebuilt runtime libs # (deps/lib, deps/piper) and the headers the CGO build needs. deps/go # keep the onnxruntime 1.26 runtime lib (the router embedder loads it); the # deps/lib symlinks point here. Other onnxruntime dirs (headers etc.) excluded. deps/onnxruntime-linux-x64-* !deps/onnxruntime-linux-x64-1.26.0 deps/onnxruntime-linux-x64-1.26.0/* !deps/onnxruntime-linux-x64-1.26.0/lib deps/whisper.cpp/** !deps/whisper.cpp !deps/whisper.cpp/ggml !deps/whisper.cpp/ggml/include !deps/whisper.cpp/ggml/include/** # local secrets — never bake into an image layer deploy/db_key.env