buddy fix

Dockerfile

@@ -28,10 +28,22 @@ WORKDIR /app
 COPY --from=builder /app/server /app
 COPY nearle-gear-firebase-adminsdk-l9oha-23ca3b3609.json .
 
-# No `.env.*` is copied in (see .dockerignore), so this only decides which
-# rules config.Load applies: production insists on a signing secret and never
-# falls back to localhost values. Every real value comes from the platform's
-# environment settings.
+# The container's own configuration.
+#
+# Copied in so the deployment does not depend on every variable having been
+# entered into a hosting platform's settings screen. A variable missed there is
+# a variable unset in production, and the failure is silent — the assistant sat
+# switched off for two days for exactly that reason, with nothing on any screen
+# saying which value was absent.
+#
+# Anything the platform DOES set still wins: `godotenv` only fills variables
+# that are not already in the environment, so Dokploy can override any line in
+# this file without the file having to change.
+COPY .env.production .
+
+# Decides which rules config.Load applies — production insists on a signing
+# secret and never falls back to localhost values — and which file above is
+# read: loadEnvFiles reads `.env.<APP_ENV>` then `.env`.
 ENV APP_ENV=production
 
 # Must match APP_PORT in the platform's environment (1009 in production).