mirror of
https://github.com/wahyd4/home-docker.git
synced 2026-08-09 04:15:52 +10:00
- Hermes Agent instance running as Discord bot WhatToDo#3542 - Restricted tools: only web/search, no terminal/file/system access - DISCORD_ALLOW_ALL_USERS=true + require_mention for access control - NetworkPolicy restricts egress to internet only (no internal network) - Secret removed from manifest — managed via kubectl create secret
67 lines
928 B
Plaintext
67 lines
928 B
Plaintext
temp.yaml
|
|
test.yaml
|
|
**/.terraform
|
|
*.tar.gz
|
|
|
|
|
|
# Local .terraform directories
|
|
**/.terraform/*
|
|
|
|
# .tfstate files
|
|
*.tfstate
|
|
*.tfstate.*
|
|
|
|
# Crash log files
|
|
crash.log
|
|
crash.*.log
|
|
|
|
# Exclude all .tfvars files, which are likely to contain sensitive data
|
|
*.tfvars
|
|
*.tfvars.json
|
|
|
|
# Ignore override files as they are usually used for local development
|
|
override.tf
|
|
override.tf.json
|
|
*_override.tf
|
|
*_override.tf.json
|
|
|
|
# Ignore CLI configuration files
|
|
.terraformrc
|
|
terraform.rc
|
|
|
|
# Ignore lock files
|
|
.terraform.lock.hcl
|
|
|
|
# Ignore generated scripts
|
|
scripts/*.sh
|
|
!scripts/security-audit-192.168.1.2.sh
|
|
|
|
# Ignore temporary files
|
|
*.tmp
|
|
*.bak
|
|
*.swp
|
|
|
|
# Ignore log files
|
|
*.log
|
|
|
|
# Ignore local environment files
|
|
.env
|
|
.envrc
|
|
|
|
# Ignore any local kubeconfig files
|
|
kubeconfig*
|
|
|
|
# Ignore any SSH keys or sensitive files
|
|
*.pem
|
|
*.key
|
|
*.pub
|
|
|
|
**/tmp/
|
|
|
|
|
|
|
|
node_modules/
|
|
|
|
# Curio agent generated config (inline in the manifest)
|
|
ai/recommendation-agent/config.yaml
|