diff --git a/.dockerignore b/.dockerignore
index a2a38c9..0d8457d 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -41,7 +41,12 @@ password.*
 .vscode/
 .workbuddy/
 node_modules/
+**/node_modules/
 web/dist/
+**/dist/
+web/.vite/
+**/.vite/
+web/coverage/
 bin/
 *.exe
 *.dll
diff --git a/Dockerfile b/Dockerfile
index fb7e981..1ea3d9f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,18 +33,20 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \
 
 # ---- Stage 3: runtime ------------------------------------------------------
 FROM alpine:3.19
-# ffmpeg/intel-media-driver/libva enable QSV / VAAPI on Intel iGPUs.
+# ffmpeg plus optional VAAPI packages. Intel media driver is x86_64-only.
 # NVENC requires the proprietary NVIDIA Container Toolkit on the host —
 # no extra packages needed inside the image, only --gpus all on docker run.
 RUN apk add --no-cache \
         ffmpeg \
-        intel-media-driver \
-        libva-utils \
-        mesa-va-gallium \
         tzdata \
         ca-certificates \
         wget \
         su-exec \
+    && if [ "$(apk --print-arch)" = "x86_64" ]; then \
+        apk add --no-cache intel-media-driver libva-utils mesa-va-gallium; \
+    else \
+        apk add --no-cache libva-utils mesa-va-gallium || true; \
+    fi \
     && rm -rf /var/cache/apk/*
 
 # Non-root user for the long-running process.