Layout, secret hygiene and workflow per the engagement's version control plan. Nothing functional yet — this establishes the shape before code lands, so the conventions are enforced from the first real commit. - .gitignore + .env.example: no secret can reach a commit object - lefthook + gitleaks pre-commit gate; blocks new files >10MB - templates/ holds config files, never per-template scripts - deploy/nginx/ version controlled rather than hand-edited on the server Refs ADR-007
32 lines
391 B
Text
32 lines
391 B
Text
# ── Secrets ──
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
*.pem
|
|
*.key
|
|
id_ed25519*
|
|
secrets/
|
|
|
|
# ── Python ──
|
|
__pycache__/
|
|
*.pyc
|
|
.venv/
|
|
venv/
|
|
.pytest_cache/
|
|
.mypy_cache/
|
|
|
|
# ── Node ──
|
|
node_modules/
|
|
dist/
|
|
build/
|
|
.next/
|
|
|
|
# ── Generated geometry: large + reproducible. Use LFS if a baseline is needed ──
|
|
*.stl
|
|
*.3mf
|
|
*.obj
|
|
*.glb
|
|
!tests/golden/**/*.3mf
|
|
|
|
# ── OS ──
|
|
.DS_Store
|