- runbooks/pdns-health.md: note the legacy powerdns-admin (PDA) orphan was removed 2026-08-12 (W1N-59). - runbooks/ansible-operations.md: document the us4 firewalld reconciliation playbook scope (audited public zone only, fail-closed, no reload). - docs/agents/domain.md: single-context repo layout for domain docs. - docs/lan-dns-alternatives.md: notes on LAN DNS alternatives. - .gitignore: exclude local agent-harness config (.agents/ .claude/ .omp/ .mcp.json WATCHDOG.yml skills-lock.json) from the repo.
31 lines
402 B
Plaintext
31 lines
402 B
Plaintext
# Local secrets and service configuration (never version these).
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
mailcow.conf
|
|
.smtp-credentials
|
|
.admin-token
|
|
*.pem
|
|
*.key
|
|
id_*
|
|
!*.pub
|
|
|
|
# Ansible runtime output.
|
|
*.retry
|
|
.ansible/
|
|
facts/
|
|
|
|
# Local agent-harness / tooling config (not repo content).
|
|
.agents/
|
|
.claude/
|
|
.omp/
|
|
.mcp.json
|
|
WATCHDOG.yml
|
|
skills-lock.json
|
|
|
|
# Editor and operating-system files.
|
|
.DS_Store
|
|
.vscode/
|
|
.idea/
|
|
*~
|