Moved config file out of the publicly served directory. Fixes #8

Co-Authored-By: Claude Opus 5.5 <[email protected]>

Dockerfile

@@ -46,6 +46,10 @@ COPY --from=builder /app/target/site /app/target/site
 # Set any required env variables and
 EXPOSE 3000
 
-# -- NB: update binary name from "leptos_start" to match your app name in Cargo.toml --
+# The config file holds passwords and the session key. Mount it to /app/config, never under
+# /app/target/site, which is served as static files.
+RUN mkdir -p /app/config
+VOLUME /app/config
+
 # Run the server
-CMD ["/app/rezervator", "-c /app/target/site/data/config.toml"]
+CMD ["/app/rezervator", "-c", "/app/config/config.toml"]