# The image is web/ served with deploy/nginx.conf. Allowlist those and nothing
# else, so no local state (audio, fixtures, caches, .env, keys) can ever end up
# in the build context.
*
!web/
!deploy/nginx.conf
!deploy/security-headers.conf