43 lines
1.6 KiB
Plaintext
43 lines
1.6 KiB
Plaintext
.git
|
|
.github
|
|
node_modules
|
|
tools
|
|
tests
|
|
Dockerfile
|
|
.dockerignore
|
|
fly.toml
|
|
*.log
|
|
.DS_Store
|
|
**/.DS_Store
|
|
# Source maps are debug-only and never needed at runtime; excluding them keeps the
|
|
# build context small (the .map files are several MB) and the deploy upload fast.
|
|
**/*.map
|
|
# Marketing screenshots are referenced only from the README, not served by the app.
|
|
assets/screenshots
|
|
# ...with one exception. The desktop client's store screenshots ARE fetched from
|
|
# this domain: its AppStream metainfo names them by URL, and both Flathub's
|
|
# reviewers and the store listing load them over HTTPS. Excluded, they 404 and
|
|
# the submission is rejected. Only the desktop-* set ships; the README's
|
|
# full-size marketing captures stay out of the image, which is what the rule
|
|
# above was for.
|
|
!assets/screenshots/desktop-*.png
|
|
# The Snap Store badge is served from this origin so the page makes no
|
|
# third-party request; it has to actually ship for that to be true.
|
|
!assets/badges/*.svg
|
|
|
|
# Everything COPY'd here becomes a public URL under securebit.chat, so anything
|
|
# git-ignored as private has to be listed again here: .dockerignore does not read
|
|
# .gitignore. Without these, the local agent settings were being served from the
|
|
# live site, and a security-audit file left in the folder during a deploy would
|
|
# have been published with it.
|
|
.claude
|
|
.agents
|
|
skills-lock.json
|
|
SECURITY_AUDIT*.md
|
|
audit
|
|
# Replaced by config/ice-servers.prod.js in the Dockerfile; the local copy may
|
|
# hold a developer's TURN credentials.
|
|
config/ice-servers.js
|
|
# Local proof-of-concept and scratch scripts at the repo root.
|
|
/*.mjs
|