UI fixing

.dockerignore

@@ -1,19 +1,49 @@
+# Build context exclusions for deploy/unraid/Dockerfile.all-in-one.
+# Everything listed here is NOT sent to the Docker daemon.
+# Keep this aggressive: the all-in-one image only needs
+# backend/, frontend/, fixtures/, scripts/, deploy/ and VERSION.
+
 .git
+.gitea
+.github
 .venv
 venv
 __pycache__
 *.pyc
 .pytest_cache
+.mypy_cache
+.ruff_cache
 
-frontend/node_modules
+# Node dependencies at every level (root test harness + frontend).
+node_modules
+**/node_modules
 frontend/dist
 frontend/*.tsbuildinfo
+**/*.tsbuildinfo
+
 backend/.pytest_cache
 backend/**/*.pyc
 backend/**/__pycache__
 
+# Accidental self-copy of the repository into itself.
+# Without this the build context is duplicated and the build stalls.
+/geointel
+
+# Local work products, never needed inside the image.
+.codex-input
+test-results
+playwright-report
+artifacts
+RELEASE_NOTES
+adr
+docs
+checklists
+*.log
+
+# Runtime data and secrets: mounted at runtime, never baked in.
 storage
 postgres-data
+backups
 datasets/raw
 datasets/processed
 datasets/cache
@@ -21,3 +51,5 @@ exports
 models
 
 .env
+.env.*
+!.env.example