.env.development had a real Postgres/Redis password and JWT secret committed in plain text; .env.test and .env.prod were tracked too. Untrack all .env* files going forward and add .env.example as the onboarding template instead. Note: the exposed dev credentials are still in git history and must be rotated separately. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
46 lines
550 B
Plaintext
46 lines
550 B
Plaintext
# Dependencies
|
|
node_modules/
|
|
.pnp
|
|
.pnp.js
|
|
|
|
# Testing & Coverage
|
|
coverage/
|
|
*.lcov
|
|
.vitest/
|
|
|
|
# Build Output
|
|
dist/
|
|
build/
|
|
*.tsbuildinfo
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
pino-*.log
|
|
|
|
# Editor & System Files
|
|
.vscode/*
|
|
!.vscode/extensions.json
|
|
!.vscode/settings.json
|
|
.idea/
|
|
*.suo
|
|
*.ntvs*
|
|
*.njsproj
|
|
*.sln
|
|
*.sw?
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Docker Persistent Volumes Data (Local)
|
|
docker/postgres/data/
|
|
docker/redis/data/
|
|
docker/minio/data/
|
|
|
|
# Environment files (secrets) — never commit real credentials
|
|
.env
|
|
.env.*
|
|
!.env.example
|