- tools/cmd/railiance-backup: pg_dump + config snapshot, age-encrypted, uploaded to Nextcloud file drop via curl PUT. Daily cron target. - tools/cmd/railiance-preflight: pre-migration safety gate — checks backup freshness, all repos clean/pushed, age key present. - bin/railiance: added backup and preflight subcommands. - DECISIONS.md: decision log (D1 ingress Nginx+Traefik, D2 Nextcloud backup). - .gitignore: exclude *backup-dropoff-link* files (contain upload tokens). - CLAUDE.md: state hub session protocol update. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
79 lines
981 B
Plaintext
79 lines
981 B
Plaintext
# OS / Editor cruft
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.swp
|
|
*.swo
|
|
*.bak
|
|
*.tmp
|
|
*~
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
*.pyd
|
|
*.egg-info/
|
|
.eggs/
|
|
.venv/
|
|
venv/
|
|
env/
|
|
|
|
# Node (in case UI helpers creep in)
|
|
node_modules/
|
|
npm-debug.log
|
|
yarn-debug.log
|
|
yarn-error.log
|
|
.pnpm-debug.log
|
|
|
|
# Ansible
|
|
*.retry
|
|
# Local inventory (never commit host IPs/secrets)
|
|
ansible/hosts.ini
|
|
hosts
|
|
.secrets/
|
|
.vault_pass.txt
|
|
|
|
# Helm / Kubernetes
|
|
charts/*.tgz
|
|
# Helm release cache
|
|
.helm/
|
|
# Kustomize build output
|
|
kustomize-build/
|
|
# Kubernetes local config
|
|
.kube/
|
|
*.kubeconfig
|
|
|
|
# Terraform (if used later)
|
|
.terraform/
|
|
terraform.tfstate
|
|
terraform.tfstate.backup
|
|
*.tfvars
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
|
|
# Coverage / test artifacts
|
|
.coverage
|
|
coverage.xml
|
|
htmlcov/
|
|
.junit/
|
|
*.out
|
|
*.err
|
|
|
|
# Git + tooling
|
|
.gitattributes.lock
|
|
.editorconfig.lock
|
|
|
|
# Local Railiance config
|
|
# (token + credentials must *never* be committed)
|
|
.railiance_gitea.conf
|
|
|
|
# Backup dropoff links (contain upload tokens)
|
|
*backup-dropoff-link*
|
|
|
|
# IDE configs
|
|
.vscode/
|
|
.idea/
|
|
*.iml
|