Bare `.env` only matched the exact filename, leaving .env.spike / .env.local and other secret variants untracked-but-committable. Ignore .env.* and re-include .env.example so the template stays tracked.
38 lines
546 B
Plaintext
38 lines
546 B
Plaintext
# Dependencies
|
|
node_modules/
|
|
|
|
# Build output
|
|
dist/
|
|
.dist/
|
|
|
|
# Environment — NEVER commit secrets at rest (DB passwords, OIDC secrets, encryption key,
|
|
# Fastmail app passwords). Ignore .env and every .env.* variant, but keep the example template.
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# Editor
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Logs
|
|
*.log
|
|
npm-debug.log*
|
|
pnpm-debug.log*
|
|
|
|
# TypeScript
|
|
*.tsbuildinfo
|
|
|
|
# Drizzle migrations (generated — not secrets, but keep clean)
|
|
# apps/api/src/db/migrations/
|
|
|
|
# Test coverage
|
|
coverage/
|
|
.nyc_output/
|