mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-07-22 23:31:12 +02:00
f984d85f02
Security & Configuration fixes: - Remove sensitive files exposing production infrastructure details - Add removed files to .gitignore to prevent re-addition - Make uploads directory configurable via UPLOADS_DIR env var - Improve URL validation regex to require valid domain structure (rejects invalid URLs like 'http://a' while supporting international chars) Files removed: DEPLOYMENT.md, claude.md, sync-from-production.sh, MIGRATION_LOCAL_LLM.md, PR_DESCRIPTION.md
67 lines
802 B
Text
67 lines
802 B
Text
.flashrank_cache*
|
|
podcasts/
|
|
.env
|
|
node_modules/
|
|
.ruff_cache/
|
|
# Environment variables and secrets
|
|
.env.local
|
|
.env.production
|
|
*.env
|
|
|
|
# LLM Configuration with API keys
|
|
**/config/global_llm_config.yaml
|
|
**/config/global_llm_config.yaml.backup*
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
*.pyd
|
|
.Python
|
|
venv/
|
|
.venv/
|
|
env/
|
|
ENV/
|
|
.pytest_cache/
|
|
|
|
# Logs and databases
|
|
*.log
|
|
*.db
|
|
*.sqlite
|
|
*.sqlite3
|
|
|
|
# SSL and keys
|
|
*.pem
|
|
*.key
|
|
*.crt
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDEs
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# Uploads and temp files
|
|
uploads/
|
|
temp/
|
|
tmp/
|
|
|
|
# Backup files
|
|
*.backup
|
|
*.backup.*
|
|
.env.backup*
|
|
pyproject.toml.backup*
|
|
security_audit_baseline*.json
|
|
installed_before_update.txt
|
|
|
|
# Deployment and production documentation (store privately)
|
|
DEPLOYMENT.md
|
|
claude.md
|
|
sync-from-production.sh
|
|
MIGRATION_LOCAL_LLM.md
|
|
PR_DESCRIPTION.md
|