diff --git a/app/.dockerignore b/app/.dockerignore
index 78e1a23..3b7d051 100644
--- a/app/.dockerignore
+++ b/app/.dockerignore
@@ -1,3 +1,7 @@
 .cache
 build
 node_modules
+.env
+.env.*
+*[Cc]red*
+.shopify
diff --git a/app/shopify.app.toml b/app/shopify.app.toml
index 2dfe065..dc08afe 100644
--- a/app/shopify.app.toml
+++ b/app/shopify.app.toml
@@ -3,14 +3,14 @@
 client_id = "8d67c00a078a615037497ad056f7f99d"
 name = "Legal Return PCRT "
 # DEV: quick tunnel Cloudflare (no interstitial). Auto-update Dev Dashboard rotto → settato via deploy. Cambia se il tunnel riparte.
-application_url = "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com"
+application_url = "https://recesso-custom.fly.dev"
 embedded = true
 
 # App Proxy: lo storefront /apps/recesso viene proxato a <application_url>/proxy.
 # NB: se il tunnel Cloudflare (application_url) cambia, aggiornare anche `url` qui.
 # Richiede `shopify app deploy` perché la configurazione abbia effetto.
 [app_proxy]
-url = "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/proxy"
+url = "https://recesso-custom.fly.dev/proxy"
 subpath = "recesso"
 prefix = "apps"
 
@@ -49,7 +49,7 @@ use_legacy_install_flow = false
 
 [auth]
 redirect_urls = [
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/auth/callback",
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/auth/shopify/callback",
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/api/auth/callback"
+  "https://recesso-custom.fly.dev/auth/callback",
+  "https://recesso-custom.fly.dev/auth/shopify/callback",
+  "https://recesso-custom.fly.dev/api/auth/callback"
 ]