From ba82787ba57a7a6b97fa128320eb845fd8394a65 Mon Sep 17 00:00:00 2001
From: hermes <hermes@ntu.edu.rs>
Date: Thu, 13 Aug 2026 10:41:28 +0800
Subject: [PATCH] Ignore plaintext vault dumps

Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index 060d1a4..55336db 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,6 +13,8 @@ secrets/vault-pass.txt
 
 # Placeholder marker generated when password archive is absent
 secrets/vault-pass.txt.zip.PLACEHOLDER
+# Plaintext vault dumps must never be committed
+secrets/*.text
 # Local installer env overrides with real secrets
 install.local.env
 *.secret.env