diff --git a/.dockerignore b/.dockerignore
index e6bce5f..03d1fbf 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -7,3 +7,11 @@ recordings/
 backend/
 frontend/
 docs/
+
+# Local files and secrets (never send to build context)
+certs/
+config.yaml
+config.test.yaml
+.env
+.claude/
+transfers/