nilsandClaude Opus 5.5
59ee2cae3b
- kustomization pins mg4-server 2.1.0 by digest; server.yaml sets PUBLIC_URL for the pairing QR code; the secrets template gains APPROVAL_PASSWORD. - Filled-in Secrets now go into k8s/secrets.yaml, which is gitignored; the template stays on placeholders. This follows a leak where real values typed into the template were committed and pushed (amended and force-pushed since; both values regenerated). - SPECS.md records pairing and the incident. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
45 lines
1.1 KiB
Plaintext
45 lines
1.1 KiB
Plaintext
*.iml
|
|
.gradle
|
|
/local.properties
|
|
/.idea/caches
|
|
/.idea/libraries
|
|
/.idea/modules.xml
|
|
/.idea/workspace.xml
|
|
/.idea/navEditor.xml
|
|
/.idea/assetWizardSettings.xml
|
|
.DS_Store
|
|
/build
|
|
/captures
|
|
.externalNativeBuild
|
|
.cxx
|
|
local.properties
|
|
|
|
# mise : mise.toml est COMMITÉ (il décrit le build). Seules les surcharges
|
|
# locales, machine-spécifiques, sont ignorées.
|
|
mise.local.toml
|
|
.mise.local.toml
|
|
|
|
# Local API configuration and dependencies.
|
|
/server/.env
|
|
/server/node_modules
|
|
|
|
# Signed build output. Rebuilt from source by ./gradlew assembleUnstableDebug and
|
|
# signed locally — a checked-in APK is stale the moment anything above it changes.
|
|
*.apk
|
|
*.idsig
|
|
|
|
# Local MG4 platform-signing material. Keep the working copies inside this
|
|
# checkout for self-contained release builds, but never publish private keys.
|
|
/tools/platform.pk8
|
|
/tools/platform.x509.pem
|
|
/tools/platform.key
|
|
/tools/platform.p12
|
|
|
|
# Build dirs of the vendored EVHardware library.
|
|
/EVHardware/build
|
|
/EVHardware/.gradle
|
|
/EVHardware/**/build
|
|
|
|
# Filled-in Kubernetes Secrets (copy of k8s/secrets.example.yaml). Never commit.
|
|
/k8s/secrets.yaml
|