From f196233257d247c94550cf822b91bc3c9d8a7f8f Mon Sep 17 00:00:00 2001 From: Doan Luu Duc Tai Date: Fri, 30 Oct 2026 16:20:09 -0500 Subject: Restrict published environment files to the root example --- docs/POLICY.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/POLICY.txt b/docs/POLICY.txt index f9e3614..592269b 100644 --- a/docs/POLICY.txt +++ b/docs/POLICY.txt @@ -31,7 +31,8 @@ PROJECT CONVENTIONS Rust documentation attributes provide crate metadata without comments. Keep configured secrets only in the root .env. Never commit .env or var/. - .env.example lists required keys with placeholders. Public hostnames, + Only the root .env.example is published; environment variants and nested + examples are ignored. .env.example lists required keys with placeholders. Public hostnames, public GPG keys, paths, configuration, and source belong in Git. TLS account/certificate private keys, databases, and other generated private state are persistent data in var/data, not .env configuration. -- cgit v1.2.3