zwitschi
7f392ef908
The Cloudflare ips-v4/v6.txt and paloalto/.gitkeep were git-tracked. The Cloudflare files are overwritten at runtime by every whitelist refresh, so on a deployed server they become locally-modified tracked files that make 'git pull' conflict. Keep the read-only paloalto/scanner-ips.txt seed tracked; ignore the rest (they are re-downloaded if absent; built-in ranges are the fallback).
32 lines
825 B
Plaintext
32 lines
825 B
Plaintext
# instructions for agents
|
|
.github/instructions/
|
|
.agents
|
|
skills-lock.json
|
|
|
|
# environment variables
|
|
.env
|
|
|
|
# python cache
|
|
__pycache__/
|
|
.mypy_cache/
|
|
|
|
# python virtual environment
|
|
.venv/
|
|
|
|
# app runtime data (feeds, caches, scan state - regenerated each run).
|
|
# All of this must stay UNTRACKED so ``git pull`` never conflicts with files a
|
|
# scan has written since the last pull (see .github/instructions/DEPLOYMENT.md).
|
|
# The single allowed tracked seed is the read-only PaloAlto scanner-ips.txt
|
|
# (never rewritten at runtime); the Cloudflare ips-*.txt are runtime-refreshed
|
|
# downloads, so they are NOT tracked and are re-downloaded if absent.
|
|
app/data/*
|
|
!app/data/paloalto/scanner-ips.txt
|
|
|
|
# SQLite database (canonical store) + WAL/SHM sidecars
|
|
app/data/*.db
|
|
app/data/*.db-wal
|
|
app/data/*.db-shm
|
|
|
|
# generated reports
|
|
app/reports/
|