diff --git a/.dockerignore b/.dockerignore
index f6e50f1..cb7f5a2 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -39,3 +39,11 @@ terraform
 .claude
 .codex
 .ralph
+
+# The admin app builds from this same monorepo context (apps/admin/Dockerfile).
+!apps/admin
+!apps/admin/**
+
+# Host build artefacts must never leak into any image context.
+**/node_modules
+**/dist