23e5a600ad
- .env.example: 3 处真 key 替换为 <REPLACE_ME_*> 占位
- L104 DIFY_API_KEY (原 app-tIfFhFwj3xnbRurK1oxxBXnA, 注释内也含)
- L117 OPENAI_API_KEY (原 sk-proj-srKxyb... 完整 164 字符)
- L135 OPENAI_API_KEY (原 sk-eIOujD5rUugIRIPecFi3I2rFr6...)
- L142 DIFY_API_KEY (原 app-aHnBfMeOQp7A9dQneIFPdPaZ)
生产真值由环境变量注入(backend/.env / docker/.env / K8s Secret);
- .gitignore: 加严真 .env 排除
- backend/.env / backend/.env.local / backend/.env.production / *.local
- docker/.env / docker/.env.local / docker/.env.prod / *.local
- backend/services/*/.env
防 0b 阶段(运维轮换)完成前有人误提交真值文件;
- 自检: grep -E 'sk-proj|sk-eIOu|app-[A-Za-z0-9]{20,}' backend/.env.example = 0 真 key
- 后续: 0b 阶段(运维真轮换)完成后, 跑 .superpowers/sdd/batch0-filter-repo-commands.md
列出的 git filter-repo 命令清历史(用户 review 后执行)。
Co-Authored-By: Claude <noreply@anthropic.com>
87 lines
2.4 KiB
Plaintext
87 lines
2.4 KiB
Plaintext
/frontend/node_modules
|
|
/frontend/unpackage/
|
|
.DS_Store
|
|
frontend/static/.DS_Store
|
|
frontend/pages/.DS_Store
|
|
frontend/.hbuilderx/launch.json
|
|
.idea
|
|
|
|
# Backend 构建产物
|
|
backend/services/activityService/activityService
|
|
backend/services/assetService/assetService
|
|
backend/services/galleryService/galleryService
|
|
backend/services/socialService/socialService
|
|
backend/services/starbookService/starbookService
|
|
backend/services/taskService/taskService
|
|
backend/services/userService/userService
|
|
backend/services/aiChatService/aiChatService
|
|
backend/services/statisticService/statisticService
|
|
backend/services/notificationService/notificationService
|
|
backend/services/moderationService/moderationService
|
|
backend/gateway/gateway
|
|
backend/gateway/aiChatService
|
|
bin/
|
|
|
|
node_modules
|
|
package-lock.json
|
|
# Added by code-review-graph
|
|
.code-review-graph/
|
|
|
|
.claude
|
|
# 本地重复脚本（不提交仓库）
|
|
backend/_local_*.ps1
|
|
backend/*/start.ps1
|
|
backend/start-*.ps1
|
|
backend/stop-*.ps1
|
|
backend/load-env.ps1
|
|
|
|
# 编译产物
|
|
backend/**/*.exe
|
|
/frontend/.env
|
|
|
|
# 浏览器远程调试临时文件
|
|
.tmp-browser/
|
|
.claude/
|
|
hookify.*.local.md
|
|
.mcp.json
|
|
|
|
# statisticService runtime logs (created by logger when running tests)
|
|
backend/services/statisticService/**/logs/
|
|
backend/services/statisticService/**/logs/*.log
|
|
|
|
# superpowers
|
|
.superpowers
|
|
# 编辑器临时文件(vim/IDE 备份)
|
|
*~
|
|
|
|
# ============================================================
|
|
# K8s / Helm (Phase 1 部署, 见 docs/superpowers/specs/2026-06-08-docker-to-k8s-migration-design.md)
|
|
# ============================================================
|
|
# Helm values 真值文件 (含 DB 密码 / API Key, 不进 git)
|
|
k8s/helm/**/values-prod.yaml
|
|
k8s/helm/**/values-*.real.yaml
|
|
# SOPS 加密后的真值文件可以提交 (加密的), 上面对应 .sops.yaml 也加进来按需解
|
|
# 当前未启用 SOPS, 先全不放
|
|
k8s/helm/**/values-secrets.sops.yaml
|
|
# helm 安装后生成的 real-secrets (运维临时导出, 不要入 git)
|
|
k8s/secrets-rendered/
|
|
k8s/manifests-rendered/
|
|
|
|
# operator / kind 本地集群产物 (Phase 1 验收用)
|
|
kubeconfig.local
|
|
.kube/
|
|
|
|
# User service temporary backup files
|
|
backend/services/userService/main.go.bak
|
|
|
|
# 批次0 密钥轮换:禁止真环境 .env 入库(占位用 .env.example)
|
|
backend/.env
|
|
backend/.env.local
|
|
backend/.env.production
|
|
backend/.env.*.local
|
|
docker/.env
|
|
docker/.env.local
|
|
docker/.env.prod
|
|
docker/.env.*.local
|
|
backend/services/*/.env
|