9540a75c13
CRITICAL SECURITY FIX: - Removed ADMIN_LOGIN_INSTRUCTIONS.md (contained admin password) - Removed scripts/reset-admin-password.js (password reset utility) - Added both to .gitignore to prevent future exposure IMMEDIATE ACTIONS REQUIRED: 1. Rotate admin password on production (current password was exposed) 2. Consider purging these files from Git history if repo is public 3. Review all committed files for sensitive information These files should remain local-only and never be committed to version control. Co-Authored-By: Claude <noreply@anthropic.com>
99 lines
1.3 KiB
Text
99 lines
1.3 KiB
Text
# Dependencies
|
|
node_modules/
|
|
|
|
# Environment variables
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# MongoDB data
|
|
data/mongodb/*
|
|
!data/mongodb/.gitkeep
|
|
|
|
# Generated files
|
|
public/downloads/*.pdf
|
|
public/downloads/*.epub
|
|
public/downloads/*.docx
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Testing
|
|
coverage/
|
|
.nyc_output/
|
|
|
|
# Build
|
|
dist/
|
|
build/
|
|
|
|
# Temporary files
|
|
tmp/
|
|
temp/
|
|
*.tmp
|
|
|
|
# ============================================
|
|
# SECURITY: Private GitHub Protection
|
|
# ============================================
|
|
|
|
# Sensitive internal documentation (keep private, never push)
|
|
CLAUDE.md
|
|
CLAUDE.md.backup
|
|
CLAUDE_Tractatus_Maintenance_Guide.md
|
|
SESSION-HANDOFF-*.md
|
|
docs/SECURITY_AUDIT_REPORT.md
|
|
docs/FRAMEWORK_FAILURE_*.md
|
|
old*
|
|
*.backup
|
|
|
|
# Framework session state (regenerated each session)
|
|
.claude/session-state.json
|
|
.claude/token-checkpoints.json
|
|
|
|
# Secrets and credentials
|
|
*.key
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
secrets/
|
|
credentials/
|
|
|
|
# Database dumps and backups
|
|
dump/
|
|
backups/
|
|
*.sql
|
|
*.sql.gz
|
|
*.dump
|
|
|
|
# SSH keys (extra safety)
|
|
*.ssh/
|
|
id_rsa*
|
|
id_ed25519*
|
|
|
|
# Deployment configurations with secrets
|
|
deployment-config.json
|
|
production.json
|
|
|
|
# Temporary audit files
|
|
/tmp/*.md
|
|
|
|
# Screenshots and temporary images
|
|
Screenshot*.png
|
|
*.screenshot.png
|
|
umami-local/
|
|
ADMIN_LOGIN_INSTRUCTIONS.md
|
|
scripts/reset-admin-password.js
|