diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-20 08:05:20 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-20 08:05:34 -0500 |
| commit | d8c27aef561d5ac238dc94603c1c074347903189 (patch) | |
| tree | d6efcb4f0d8a2c819abd9067b5eeff02b1f49335 /assets/wireguard-config/.gitignore | |
| parent | f5c571712834c87615a040b2901fc3a21e4a98aa (diff) | |
| download | archsetup-d8c27aef561d5ac238dc94603c1c074347903189.tar.gz archsetup-d8c27aef561d5ac238dc94603c1c074347903189.zip | |
fix(security): stop tracking plaintext WireGuard configs
The repo is public via cgit, so the three plaintext configs (added fe4383b)
exposed live Proton PrivateKeys. Remove them, gitignore plaintext, and document
the encrypted-only workflow. Keys rotated at Proton; history purged separately.
Diffstat (limited to 'assets/wireguard-config/.gitignore')
| -rw-r--r-- | assets/wireguard-config/.gitignore | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/assets/wireguard-config/.gitignore b/assets/wireguard-config/.gitignore new file mode 100644 index 0000000..d5e34ab --- /dev/null +++ b/assets/wireguard-config/.gitignore @@ -0,0 +1,5 @@ +# This repo is PUBLIC (cgit at git.cjennings.net serves it unauthenticated). +# NEVER commit plaintext WireGuard configs here — they carry live PrivateKeys. +# Ship configs gpg-encrypted (*.conf.gpg) only; the installer decrypts at import. +*.conf +!*.conf.gpg |