From 48bcb243c08f91c83b53ea1c06945b9eddbb58bb Mon Sep 17 00:00:00 2001
From: Daniel Bedeleanu <bede@tfm.ro>
Date: Thu, 23 Apr 2026 12:42:20 +0300
Subject: [PATCH] chore(07-01): update .gitignore to protect actual YAML
 configs

- Ignored config/*.yaml (secrets protection)
- Ensured examples/schemas are tracked via !config/*.yaml.example
- Added specific rules for secrets.yaml and its example
---
 .gitignore | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.gitignore b/.gitignore
index 50641428..f0a50bc7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -52,6 +52,15 @@ backend/.env.*
 docker-compose.override.yml
 .env.docker
 
+# ── Configuration consolidation (Phase 7) ────────────────────
+# Ignore actual YAML config files which contain real values/secrets
+config/*.yaml
+# But ensure example/schema files are ALWAYS tracked
+!config/*.yaml.example
+# Specifically ignore secrets.yaml
+config/secrets.yaml
+!config/secrets.yaml.example
+
 # ── Application logs ─────────────────────────────────────────
 # (also covered by /logs/* above, these catch any other locations)
 frontend/logs/