SECURITY FIXES: - Add restart.sh script that reads Vault credentials from /tmp/ only - Add .gitignore rules for: vault-unseal-keys, start-and-unseal.sh, vault-token-* - Add security warning to README.md about /tmp/ for secrets - Update botserver port references from 8088 to 9000 in README Secrets MUST be placed in /tmp/ only: - /tmp/vault-token-gb (Vault root token) - /tmp/vault-unseal-key-gb (Vault unseal key) This commit removes the previous commit (c7a60b8) that contained hardcoded secrets in restart.sh and start-and-unseal.sh files. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
57 lines
735 B
Text
57 lines
735 B
Text
# Build artifacts
|
|
target/
|
|
*.out
|
|
bin/
|
|
*.png
|
|
*.jpg
|
|
# Logs
|
|
*.log
|
|
*logfile*
|
|
*-log*
|
|
|
|
# Temporary files
|
|
.tmp*
|
|
.tmp/*
|
|
|
|
# Environment files
|
|
.env
|
|
*.env
|
|
|
|
# Work directories
|
|
work/
|
|
|
|
# Redis
|
|
*.rdb
|
|
|
|
# Documentation build
|
|
docs/book
|
|
|
|
# Installers (keep gitkeep)
|
|
botserver-installers/*
|
|
!botserver-installers/.gitkeep
|
|
botserver-stack
|
|
TODO*
|
|
work
|
|
|
|
# Lock file (regenerated from Cargo.toml)
|
|
Cargo.lock
|
|
.kiro
|
|
config
|
|
|
|
# Data directory (contains bot configs and API keys)
|
|
data/
|
|
|
|
# Playwright
|
|
node_modules/
|
|
/test-results/
|
|
/playwright-report/
|
|
/blob-report/
|
|
/playwright/.cache/
|
|
/playwright/.auth/
|
|
config/directory_config.json
|
|
# CI cache bust: Fri Feb 13 22:33:51 UTC 2026
|
|
|
|
# Secrets - NEVER commit these files
|
|
vault-unseal-keys
|
|
start-and-unseal.sh
|
|
vault-token-*
|