Fix Docker security: Remove .env from image

Security improvements:
- Removed .env copy from Dockerfile (credentials should never be in images)
- Added .env to .dockerignore
- Created .env.example template for users
- Environment variables now passed via docker-compose or --env-file

Docker build will now succeed and be secure for production deployment.

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>

.dockerignore

@@ -24,6 +24,10 @@ ENV/
 .git/
 .gitignore
 
+# Environment
+.env
+.env.*
+
 # Testing
 .pytest_cache/
 .coverage

.env.example

@@ -0,0 +1,39 @@
+# Azure OpenAI Configuration
+AZURE_OPENAI_API_KEY=your_azure_openai_api_key_here
+AZURE_OPENAI_ENDPOINT=https://your-resource.openai.azure.com/
+AZURE_OPENAI_API_VERSION=2024-08-01-preview
+
+# Azure Document Intelligence (using same credentials as OpenAI for hackathon)
+AZURE_DOCUMENT_INTELLIGENCE_ENDPOINT=https://your-resource.services.ai.azure.com/
+AZURE_DOCUMENT_INTELLIGENCE_KEY=your_document_intelligence_key_here
+
+# VM Configuration (Optional)
+VM_HOST=your-vm-host.cloudapp.azure.com
+VM_USER=hackathon
+VM_SSH_KEY=your_ssh_key
+
+# HuggingFace Resources (Optional)
+HUGGINGFACE_ORG=https://huggingface.co/SOCARAI
+DATASET_NAME=SOCARAI/ai_track_data
+
+# GitHub Code Samples (Optional)
+CODE_SAMPLES_REPO=https://github.com/neaorin/foundry-models-samples
+
+# Application Configuration
+DATA_DIR=./data
+PDF_DIR=./data/pdfs
+VECTOR_DB_PATH=./data/vector_db
+PROCESSED_DIR=./data/processed
+
+# LLM Model Configuration
+# Available open-source models: DeepSeek-R1, Llama-4-Maverick-17B-128E-Instruct-FP8
+# Using Llama-4-Maverick for optimal speed/quality balance and open-source architecture scores!
+LLM_MODEL=Llama-4-Maverick-17B-128E-Instruct-FP8
+
+# API Configuration
+API_HOST=0.0.0.0
+API_PORT=8000
+
+# Disable telemetry and warnings
+TOKENIZERS_PARALLELISM=false
+ANONYMIZED_TELEMETRY=false

Dockerfile

@@ -35,7 +35,6 @@ COPY --from=builder /usr/local/bin /usr/local/bin
 # Copy application code
 COPY src/ ./src/
 COPY run.py .
-COPY .env .
 
 # Create directories for data
 RUN mkdir -p data/pdfs data/vector_db data/processed