diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..41e7115
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,22 @@
+# Le Dockerfile ne copie que package.json, pnpm-lock.yaml, pnpm-workspace.yaml,
+# docs/ et nginx.conf. Tout ce qui suit alourdit le contexte envoye au builder
+# (kaniko en CI) sans jamais servir -- .git a lui seul pese l'historique complet.
+
+.git
+.gitignore
+.idea
+.vscode
+
+node_modules
+**/node_modules
+
+# Sorties de build : regenerees dans l'image, jamais reprises du contexte.
+**/.vitepress/cache
+**/.vitepress/dist
+.pnpm-store
+
+# Chart Helm : consomme par ArgoCD depuis le depot, pas par l'image.
+helm
+
+*.log
+.DS_Store
diff --git a/docs/administration/rbac/console-cpin.md b/docs/guide/rbac/console-cpin.md
similarity index 100%
rename from docs/administration/rbac/console-cpin.md
rename to docs/guide/rbac/console-cpin.md
diff --git a/docs/administration/rbac/grafana.md b/docs/guide/rbac/grafana.md
similarity index 100%
rename from docs/administration/rbac/grafana.md
rename to docs/guide/rbac/grafana.md
diff --git a/docs/administration/rbac/harbor.md b/docs/guide/rbac/harbor.md
similarity index 100%
rename from docs/administration/rbac/harbor.md
rename to docs/guide/rbac/harbor.md
diff --git a/docs/administration/rbac/keycloak.md b/docs/guide/rbac/keycloak.md
similarity index 100%
rename from docs/administration/rbac/keycloak.md
rename to docs/guide/rbac/keycloak.md
diff --git a/docs/administration/rbac/nexus.md b/docs/guide/rbac/nexus.md
similarity index 100%
rename from docs/administration/rbac/nexus.md
rename to docs/guide/rbac/nexus.md
diff --git a/docs/administration/rbac/sonarqube.md b/docs/guide/rbac/sonarqube.md
similarity index 100%
rename from docs/administration/rbac/sonarqube.md
rename to docs/guide/rbac/sonarqube.md
diff --git a/docs/administration/rbac/vault.md b/docs/guide/rbac/vault.md
similarity index 100%
rename from docs/administration/rbac/vault.md
rename to docs/guide/rbac/vault.md