graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: track .envrc, gitignore .envrc.local for secrets

Browse source 
.envrc contains shared direnv/Nix setup (no secrets). Local overrides
and secrets belong in .envrc.local, which is now gitignored.
This commit is contained in:
Graham McInitre 2026-07-22 08:36:40 -05:00
parent bff35368b0
commit 24eaccd7a8
2 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
.envrc Normal file
View file

@ -0,0 +1,7 @@
# shellcheck shell=bash
# shellcheck disable=SC1091
use flake . --impure
dotenv_if_exists .env.local

3
.gitignore vendored
View file

@ -60,7 +60,8 @@ npm-debug.log
/priv/plts/
# Environment variables (used by direnv and Kustomize secretGenerator)
.envrc
# .envrc is tracked — put local secrets in .envrc.local
.envrc.local
k8s/.envrc
/towerops-agent/