- Add make_ping_key_revocation.py: onion revocations are signed by the identity key, DNS TXT revocations are self-signed by the revoked key - Document the revocation format, endpoint, helper usage, lifetime and no-revocation-of-identity-key limits - Update the security audit, references and env docs for the new flow and the v2/onion-only scope
62 lines
807 B
Plaintext
62 lines
807 B
Plaintext
# Secrets and environment files - NEVER commit
|
|
.env
|
|
.env.*
|
|
.env.local
|
|
*.env.local
|
|
.env.production
|
|
.env.secret
|
|
!.env.example
|
|
*.pem
|
|
private_key.pem
|
|
privkey.pem
|
|
!public_key.pem
|
|
*.key
|
|
ec.key
|
|
chiave_privata.key
|
|
|
|
# Databases
|
|
*.db
|
|
*.db-shm
|
|
*.db-wal
|
|
|
|
# Rust build artifacts
|
|
/target
|
|
|
|
# Release artifacts
|
|
/releases/
|
|
*.tar.gz
|
|
*.tar.gz.asc
|
|
*.tar.gz.sig
|
|
*.tar.gz.sha256
|
|
bal-server-*/
|
|
|
|
# Deployment configs (keep in deploy scripts, not in repo)
|
|
bal-server.env
|
|
bal-pusher.env
|
|
bitcoind.service
|
|
tbitcoind.service
|
|
|
|
# Test data and scratch files
|
|
invalid_txs
|
|
valid_txs
|
|
test
|
|
update
|
|
update_codebase.txt
|
|
|
|
# Utility scripts (keep local, not in repo)
|
|
sendtx.sh
|
|
lib.sh
|
|
generate_random_ascii.sh
|
|
start_postgres_docker.sh
|
|
make_release.sh
|
|
download_bal_db.sh
|
|
|
|
# Misc
|
|
*.swp
|
|
*.swo
|
|
__pycache__/
|
|
*.pyc
|
|
src/xpub.rs2
|
|
public_key.pem
|
|
.gitsecret/
|