.tip

Apr 7, 2026 · one of the small things

A .dockerignore is the first file in a new Dockerfile's folder

Without it, COPY . . sends node_modules, .git and every local artefact to the build, which is slow and occasionally ships a secret.

node_modules
.git
.next
*.log
.env*

Same syntax as .gitignore. The build context size is printed at the start of every build. If it is more than a few megabytes, this file is missing something.

docker

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close