diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..c5d0467
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,6 @@
+# Container build files must stay LF regardless of the checkout platform —
+# Docker builds from the working tree, and CRLF breaks a shell script's shebang
+# inside Alpine (and corrupts heredoc-generated configs in the AIO Dockerfile).
+*.sh        text eol=lf
+Dockerfile  text eol=lf
+entrypoint.sh text eol=lf