mirror of
https://github.com/Such-Software/smirk-backend-core.git
synced 2026-10-17 15:31:38 +02:00
jwinterm
54fe344d14
- tools/secret-scan.sh now also flags nsec1 Nostr secret keys and *_PEPPER/*_SALT/*INTEGRITY_SECRET hex assignments, the secret classes this backend actually handles (previously only PEM/seed shapes). - .gitignore: *.hex + admin-key* so an operator running inside the checkout cannot commit the raw admin key (create-admin-wallet --out). - PRIVACY.md pointing to the canonical smirk.cash/privacy, framed for self-hosting operators as independent data controllers.
40 lines
733 B
Plaintext
40 lines
733 B
Plaintext
# Rust build artifacts
|
|
/target
|
|
**/*.rs.bk
|
|
|
|
# Cargo.lock IS tracked — this is a deployable binary, so we want reproducible builds.
|
|
# (Do not ignore it.)
|
|
|
|
# Environment / secrets — never commit anything but the example.
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
*.key
|
|
*.pem
|
|
# Bare-hex secret files (e.g. `smirk-admin create-admin-wallet --out admin-key.hex`)
|
|
# so an operator running inside the checkout cannot commit the raw admin key.
|
|
*.hex
|
|
admin-key*
|
|
*.p12
|
|
secrets/
|
|
secret_store/
|
|
|
|
# Runtime / data
|
|
*.log
|
|
data/
|
|
*.sqlite
|
|
*.db
|
|
|
|
# Tor hidden-service keys (admin onion) must never enter the repo.
|
|
tor/
|
|
hs_ed25519_secret_key
|
|
|
|
# Editor / OS
|
|
.DS_Store
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
|
|
# container cross-build output (glibc-compat binary for deploy)
|
|
/target-deb/
|