From f141a84a142de3bd017535a67dd913c6827993c4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Hartmut=20N=C3=B6renberg?= Date: Fri, 11 Sep 2026 16:21:41 +0200 Subject: [PATCH] chore: ignore .env copies, allow docker commands in Claude Code settings MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit .gitignore matched .env and .env.*.local but not the copies people and tools actually leave behind — .env.bak-20260911, .env.save, .env.orig. Those carry the identical secrets and showed up as untracked, one `git add .` away from being committed. Patterns verified with git check-ignore. The .claude/settings.json entry stops Claude Code prompting for confirmation on every docker/docker compose invocation during local debugging. Co-Authored-By: claude-flow --- .claude/settings.json | 4 +++- .gitignore | 6 ++++++ 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/.claude/settings.json b/.claude/settings.json index 6563bd6..0037840 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -166,7 +166,9 @@ "Bash(npx @claude-flow*)", "Bash(npx claude-flow*)", "Bash(node .claude/*)", - "mcp__claude-flow__:*" + "mcp__claude-flow__:*", + "Bash(docker *)", + "Bash(docker compose *)" ], "deny": ["Read(./.env)", "Read(./.env.*)"] }, diff --git a/.gitignore b/.gitignore index 82cdd33..e036b6c 100644 --- a/.gitignore +++ b/.gitignore @@ -24,6 +24,12 @@ apps/web/e2e/.playwright-runtime.json .env.test.local .env.production.local .env.*.local +# Hand-made or tool-made copies of .env — these carry the same secrets as the +# original but match none of the patterns above (.env.bak-20260911, .env.save). +.env.bak* +.env.backup* +.env.orig +.env.save *.e2e-backup # Logs