caf937f295
All checks were successful
- Promote #910, #914, #867 to backlog with acceptance criteria + affected files - Promote #820 to backlog (already well-structured, dep on #758 gates pickup) - Stage #915 as dust (no-op sed, single-line removal) - Update all AGENTS.md watermarks to HEAD - Root AGENTS.md: document vault-seed-<svc>.sh convention + complete test file list - Track gardener/dust.jsonl in git (remove from .gitignore)
40 lines
817 B
Text
40 lines
817 B
Text
# Plaintext secrets (never commit)
|
|
.env
|
|
|
|
# Encrypted secrets — safe to commit (SOPS-encrypted with age)
|
|
!.env.enc
|
|
!.sops.yaml
|
|
|
|
# Per-box project config (generated by disinto init)
|
|
projects/*.toml
|
|
|
|
# Runtime state
|
|
*.log
|
|
*.log.*
|
|
*.log.old
|
|
state.json
|
|
*.lock
|
|
*.pid
|
|
metrics/supervisor-metrics.jsonl
|
|
|
|
# OS
|
|
.DS_Store
|
|
dev/ci-fixes-*.json
|
|
|
|
# Individual encrypted secrets (managed by disinto secrets add)
|
|
secrets/
|
|
|
|
# Pre-built binaries for Docker builds (avoid network calls during build)
|
|
docker/agents/bin/
|
|
|
|
# Generated docker-compose.yml (run 'bin/disinto init' to regenerate)
|
|
# Note: This file is now committed to track volume mount configuration
|
|
# docker-compose.yml
|
|
|
|
# Generated Caddyfile — single source of truth is generate_caddyfile in lib/generators.sh
|
|
docker/Caddyfile
|
|
|
|
# Python bytecode
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|