dotfiles/.gitignore at main · patryksg/dotfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
# Secrets / Auth — defense in depth
.ssh/
.gnupg/
.keys/
.pki/
.net/
.gemini/
.openclaw/
.claude/
.claude.json
.npmrc
.tidal-dl.json
.cargo/credentials*
.cargo/registry/
.cargo/.crates*
.config/Antigravity/
.config/chromium/
.config/electron-backend/
.config/dconf/
.config/filezilla/
.config/google-chrome/
.mozilla/
.thunderbird/
.local/share/keyrings/
.local/share/kwalletd/

# History / state files (often leak secrets via cmd args, edit buffers, etc.)
.bash_history
.zsh_history
.python_history
.node_repl_history
.viminfo
.wget-hsts
.lesshst
.sdirs
.osh-update
*.omb-backup-*

# WG / IPSec / VPN configs (often contain private keys)
*.wg
wg*.conf
*wireguard*

# Plain-text credential files
*password*
*passwords*
*credentials*
*.pem
*.key
*_rsa
*_dsa
*_ed25519
*_ecdsa
*_id
id_*
known_hosts
authorized_keys

# Compose files in this repo had plaintext passwords — keep them out
compose_*.yml
docker-compose*.yml

# Build / cache / runtime garbage
*.log
*.iso
*.sqlite
*.sqlite3
*.lockfile
__pycache__/
*.pyc
node_modules/
.cache/
*.swp
*.swo
*~

# OS
.DS_Store
Thumbs.db