From 87f36fb43d343da7367bd7877cd6149f34fa65ce Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Tue, 4 Aug 2026 04:47:22 +0000 Subject: [PATCH] fix: remove committed .env.dev and close the .gitignore gap MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit .env.dev was tracked in a public repository. .gitignore already excluded .env, .env.prod and .env.test; .env.dev was simply missed, so it was committed with real values rather than the placeholders in .env.sample. Contains a MongoDB password, a JWT signing secret and a BTCPay private credential. Removing the file from HEAD does not remove it from history — these values must be treated as disclosed and rotated. Co-Authored-By: Claude Opus 5 --- .env.dev | 70 ------------------------------------------------------ .gitignore | 1 + 2 files changed, 1 insertion(+), 70 deletions(-) delete mode 100644 .env.dev diff --git a/.env.dev b/.env.dev deleted file mode 100644 index 2711fd5..0000000 --- a/.env.dev +++ /dev/null @@ -1,70 +0,0 @@ -# environment -HOST_USER=ubuntu -HOST_DOMAIN=profullstack -HOST_PATH=numelli.com -HOST_PROJECT=numelli-api - -# docker -DOCKER_CONTAINER_API_PORT=8538 -DOCKER_CONTAINER_API_DEBUG_PORT=9227 -DOCKER_NETWORK_NAME=numelli-network -DOCKER_CONTAINER_MONGO_NAME=numelli-db -DOCKER_CONTAINER_MONGO_PORT=28015 -DOCKER_CONATAINER_REDIS_NAME=numelli-cache -DOCKER_CONTAINER_REDIS_PORT=6382 -DOCKER_CONTAINER_ES_NAME=numelli-es -DOCKER_CONTAINER_ES_PORT=9202 - - -# app -PORT=8537 -NODE_ENV=production -JWT_SECRET=ciG4ardisF4 - -# meta -SITE_NAME=numelli -SITE_DOMAIN=numelli.com -SITE_URL=https://numelli.com -SITE_DESCRIPTION='Zero moderation Reddit clone.' - -# MongoDB -MONGO_URI=mongodb://numelli:af84_s@mongo:27017/numelli?authSource=admin -MONGO_INITDB_ROOT_USERNAME=numelli -MONGO_INITDB_ROOT_PASSWORD=af84_s -MONGO_INITDB_DATABASE=numelli - -# redis -REDIS_URL=redis://redis - -# mailgun -MAILGUN_PASS= -MAILGUN_USER=postmaster@mg.numelli.com -MAILGUN_SMTP_HOST=smtp.mailgun.org -MAILGUN_SMTP_PORT=587 - -# coinpayments.net -COINPAYMENTS_KEY= -COINPAYMENTS_SECRET= - -# BTCPAY -BTCPAY_PAIRING_CODE=nJeSuTb -BTCPAY_PRIVATE=4d4cbcfe0d507972fbe3b62d07f1c23eb5 -BTCPAY_MERCHANT=MUSHcYLqRHag5MMCxbH2ggUYH -BTCPAY_URL=https://btcpay.profullstack.com -BTCPAY_NOTIFICATION=http://localhost:8537 - -ELASTIC_SEARCH_URI=http://es01:9200 - -STRIPE_API_KEY= -STRIPE_API_SECRET= - -COST_SPONSORED_POST=2 - -#uploads -MAX_UPLOAD_SIZE=1073741824 - -#KEYS -AUTH_BRISKREADER="" - -# BRISKREADER -BR_CAT_NEWS="" diff --git a/.gitignore b/.gitignore index e2cc6d6..5f4f999 100644 --- a/.gitignore +++ b/.gitignore @@ -93,3 +93,4 @@ typings/ # DynamoDB Local files .dynamodb/ +.env.dev