From 22b428d22249c8063f79d05db784be4f9860abe2 Mon Sep 17 00:00:00 2001
From: Dorian <dorian@Dorians-MacBook-Air.local>
Date: Mon, 9 Mar 2026 07:33:56 +0000
Subject: [PATCH] chore: harden .gitignore for secrets and credentials

Add wildcard .env* exclusion, PEM/key/cert patterns.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitignore | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 8d9520a..63ec5f0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,10 +5,14 @@ target/
 __pycache__/
 *.pyc
 .env
-.env.local
+.env.*
+!.env.example
 .DS_Store
 loop/loop.log
 server/data/
 loop/
 .pnpm-store/
 .npmrc
+*.pem
+*.key
+*.crt