dde2cdd6e2
Some checks failed
Sync infra to hosts / sync-beta (push) Failing after 13s
Sync infra to hosts / sync-prod (push) Successful in 25s
secrets-guard / encrypted (push) Successful in 22s
Validate observability stack / validate (push) Successful in 27s
shell-lint / shellcheck (push) Successful in 21s
Build + push backend image (Forgejo registry) / build-push (push) Successful in 1m24s
Build + push frontend image (Forgejo registry) / build-push (push) Successful in 1m21s
Deploy backend to beta VPS / deploy (push) Successful in 2m4s
Deploy frontend to beta VPS / deploy (push) Successful in 2m12s
33 lines
1 KiB
Text
33 lines
1 KiB
Text
# Terraform state/vars are also ignored inside terraform/.gitignore; repeated here
|
|
# in case a stray file ever lands at repo root.
|
|
*.tfstate
|
|
*.tfstate.*
|
|
.terraform/
|
|
*.tfvars
|
|
!*.tfvars.example
|
|
crash.log
|
|
crash.*.log
|
|
|
|
# The SOPS+age private key must never be committed (deploy/secrets/*.yaml, the
|
|
# encrypted values, are meant to be committed).
|
|
age.key
|
|
*.age.key
|
|
|
|
.DS_Store
|
|
|
|
# lake-iceberg's pytest suite runs in place.
|
|
__pycache__/
|
|
*.pyc
|
|
|
|
# Host-side deploy state (deploy.sh): the live per-service image tags and the
|
|
# cross-repo deploy lock. Untracked on purpose -- they must survive the
|
|
# `git reset --hard` at the top of every deploy (deploy.sh's comments already
|
|
# assumed .image-tags.env was ignored; make it actually true so a stray
|
|
# `git clean` can't destroy the record of what's running).
|
|
deploy/.image-tags.env
|
|
deploy/.deploy.lock
|
|
deploy/.stack-image-tags.env
|
|
|
|
# LAN dev's mirror of the rendered secrets, for snap-confined Docker (see
|
|
# deploy-dev.sh / render-secrets.sh) -- plaintext, re-rendered every deploy.
|
|
deploy/dev-secrets.env
|