- Add .env.example with all config vars (no real secrets) - Exclude .env, .env.*, docker-compose.override.yml - Exclude wg/ (WireGuard configs with private keys) - Exclude dump/, dump.zip, *.csv (sensitive exports) - Keep .env.example tracked (!.env.example exception)
1.3 KiB
1.3 KiB