mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 22:26:33 +00:00
88526095e2
sec-config.yaml is now generated at Docker build time from
sec-config.template.yaml via envsubst. Secrets come from Coolify
build args (set in UI, never in git). Template uses ${VAR:-default}
placeholders — safe to commit to public repo.
- sec-config.yaml removed from git, added to .gitignore
- sec-config.template.yaml added (public, no secrets)
- Dockerfile.server: ARGs for all config, envsubst generates config
at build time, result is chmod 444 (read-only)
- Coolify compose: removed sec-config volume mount (baked in now)
- For native installs: copy template to sec-config.yaml, fill values
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
51 lines
639 B
Text
51 lines
639 B
Text
# Dependencies
|
|
node_modules/
|
|
|
|
# Build output
|
|
server/lib/
|
|
server/bsb-plugin.json
|
|
nodered/lib/
|
|
kiosk/target/
|
|
|
|
# BSB generated
|
|
.bsb/
|
|
|
|
# Runtime data
|
|
*.db
|
|
*.db-wal
|
|
*.db-shm
|
|
secret.key
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
Desktop.ini
|
|
|
|
# Editors
|
|
.vscode/
|
|
!.vscode/settings.json
|
|
!.vscode/extensions.json
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# Env / secrets
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# Logs
|
|
*.log
|
|
npm-debug.log*
|
|
|
|
# Misc
|
|
*.tgz
|
|
*.tsbuildinfo
|
|
# RAUC signing keys (generated locally, secrets set in GitHub Actions)
|
|
rauc-signing/
|
|
old-python/
|
|
/Hik-Connect-Docs.pdf
|
|
/Hik-Connect-Docs.md
|
|
# sec-config.yaml is generated from template — never commit real config
|
|
/sec-config.yaml
|