From e09866716d1e492bc1c72e92de0eb3fddbecad42 Mon Sep 17 00:00:00 2001
From: XShine555 <xshine555@gmail.com>
Date: Mon, 20 Jul 2026 07:27:31 +0200
Subject: [PATCH] chore: ignore production env files and mounted secrets

The existing *.env pattern did not match deploy/.env.prod, which holds
database, Zitadel and OIDC credentials. Also ignore deploy/secrets/,
mounted into the api and worker containers.
---
 .gitignore | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitignore b/.gitignore
index 49ba807..25cd298 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,8 @@ Thumbs.db
 
 # Secrets / local
 *.env
+
+# Production env and mounted secrets
+.env.prod
+*.env.*
+deploy/secrets/