The self-hosting stack

.gitattributes

@@ -0,0 +1,13 @@
+# These files are read by Docker on a Linux host, whatever the machine that cloned them.
+#
+# Without this, a clone on Windows checks them out with CRLF, and the carriage return rides into
+# `.env` as part of a VALUE — Compose passes it through verbatim, so it ends up inside the database
+# password, the JWT secrets and the vault master key. The failure then surfaces as Postgres refusing
+# the connection, or as a vault that cannot decrypt what it wrote yesterday, with nothing anywhere
+# naming a line ending as the cause.
+* text=auto eol=lf
+
+# And the screenshots are bytes, not text. `text=auto` above already detects that correctly, but
+# saying so costs one line and removes the question before somebody adds a JPEG.
+*.png binary
+*.jpg binary