From 9919e20850c9d35d0399eca8ad3fccc7e3635fe0 Mon Sep 17 00:00:00 2001
From: Jonathon Wright <jonny.wright225@gmail.com>
Date: Wed, 17 Jun 2026 22:52:30 +1000
Subject: [PATCH] gitignore: broaden secret patterns
 (env/keys/certs/credentials/kubeconfig)

---
 .gitignore | 22 +++++++++++++++++++---
 1 file changed, 19 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 7cd853b..e28bd68 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,9 +13,25 @@ yarn-error.log*
 pnpm-debug.log*
 
 
-# environment variables
-.env
-.env.production
+# secrets — never commit (belt-and-suspenders; real creds live outside the repo)
+.env*
+!.env.example
+*.pem
+*.key
+*.crt
+*.p12
+*.pfx
+*.token
+*.tfvars
+*credentials*
+.git-credentials
+.netrc
+id_rsa*
+id_ed25519*
+*.kubeconfig
+kubeconfig
+*.secret
+secrets.*
 
 # macOS-specific files
 .DS_Store