the .gitiignore stuff makes perfect sense actually. there's nothing in that folder when the container is not running so not a security issues. will pull the PR and double check everything but looks good so far :-)