multi-cloud-infra/.gitignore at main · saidalba/multi-cloud-infra · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
# ==========================================
# 1. Declarative Provisioning (Terraform / OpenTofu)
# ==========================================
# Ignore local provider plugins and initialization directories
.terraform/
# .terraform.lock.hcl is intentionally NOT ignored -- it pins exact provider
# versions/hashes for reproducible `terraform init` across machines and CI.

# Ignore local state files (Crucial: contains plain-text secrets and infrastructure metadata)
*.tfstate
*.tfstate.backup
*.tfstate.lock.info

# Ignore variables files containing active API keys, tenancy OCIDs, and tokens
*.tfvars
*.tfvars.json
terraform.tfvars

# Ignore crash logs
crash.log

# ==========================================
# 2. Configuration Automation (Ansible)
# ==========================================
# Ignore local runtime retry files
*.retry

# Ignore Ansible Vault password files stored locally
*vault_password*
.vault_pass

# Ignore local ad-hoc inventory changes
ansible/hosts.ini

# Ignore inventories generated by scripts/generate-inventory.sh
ansible/inventory/*.ini

# ==========================================
# 3. Security & Credentials (SSH Keys / Cloud Credentials)
# ==========================================
# Never commit active private or public keys
*.pem
*.key
*.pub
id_rsa
id_rsa.pub
oci_api_key.pem

# ==========================================
# 4. System & IDE Overrides
# ==========================================
# macOS clutter
.DS_Store
Thumbs.db

# Editor environments
.vscode/
.zed/
.idea/
*.swp
*.swo