gitignore: broaden secret patterns (env/keys/certs/credentials/kubeconfig)

2026-06-17 22:52:30 +10:00
parent 08fb56935d
commit 9919e20850
1 changed files with 19 additions and 3 deletions
@@ -13,9 +13,25 @@ yarn-error.log*
 pnpm-debug.log*


-# environment variables
-.env
-.env.production
+# secrets — never commit (belt-and-suspenders; real creds live outside the repo)
+.env*
+!.env.example
+*.pem
+*.key
+*.crt
+*.p12
+*.pfx
+*.token
+*.tfvars
+*credentials*
+.git-credentials
+.netrc
+id_rsa*
+id_ed25519*
+*.kubeconfig
+kubeconfig
+*.secret
+secrets.*

 # macOS-specific files
 .DS_Store