Merge remote-tracking branch 'upstream/dev' into dev

# Conflicts: # README.md
2026-07-07 23:48:48 +02:00
parent 9c7b365668 c67deaa60a
commit 5a550c26f6
822 changed files with 129876 additions and 21462 deletions
--- a/.dockerignore
+++ b/.dockerignore
@@ -10,6 +10,16 @@ dist/
 build/
 .env
 .env.bak.*
+# Secrets: keep plaintext and every transient secrets.env variant out of
+# the build context. If an encrypted secrets.env is used, it is mounted
+# at runtime — never baked into the image. Mirrored in .gitignore.
+secrets.env
+secrets.env.*
+secrets.env~
+.secrets.env.swp
+.secrets.env.swo
+**/#secrets.env#
+!secrets.env.example
 /data/
 /logs/
 .git/