- NEW: services/shared.env.age — encrypted shared API keys (OpenRouter, Mistral, Minimax, Poe) - REMOVE: services/hermes/.env.age — no service-specific secrets needed - UPDATE: services/paperclip/.env.age — now only DB password + auth secret - UPDATE: docker-compose.yml (paperclip + hermes) — use env_file for shared.env - UPDATE: deploy_script.sh — decrypt shared.env.age first, read API keys from there - UPDATE: .gitignore — add services/shared.env - UPDATE: README.md — document shared.env pattern
34 lines
515 B
Plaintext
34 lines
515 B
Plaintext
# Environment files (contain secrets)
|
|
**/.env
|
|
services/shared.env
|
|
|
|
# AGE private key (never commit)
|
|
**/age-key.txt
|
|
|
|
# OS files
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Editor files
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
.vscode/
|
|
.idea/
|
|
|
|
# Temporary scratch folder
|
|
scratch/
|
|
|
|
# Generated additions
|
|
temp.txt
|
|
*.tmp
|
|
*.log
|
|
.venv/
|
|
|
|
# Caddy fragments directory (assembled by deploy_script.sh from each service's *.caddy)
|
|
services/caddy/fragments/
|
|
|
|
# Local docker save backups (don't accidentally commit these — too big)
|
|
paperclip-image.tar
|
|
paperclip-image.tar.gz
|