Docker hardening (non-root, healthcheck, .dockerignore, log caps) + UI table/typography polish

This commit is contained in:
Barely Removable 2026-08-22 11:25:52 -07:00
parent e586bc92e7
commit bb5d50502c
6 changed files with 84 additions and 8 deletions

12
.dockerignore Normal file
View file

@ -0,0 +1,12 @@
# The database (and everything else in the mounted volume) must never be
# baked into an image — it's live data, and it made every build context
# larger by the full size of everyone's grading history.
data/
grades.db
.git/
nginx/
README.md
docker-compose.yml
.env*
__pycache__/
*.pyc