From dd953532898d73ecf7dd1b36c11a3bafbb0e8332 Mon Sep 17 00:00:00 2001
From: Giorgio Gilestro <giorgio@gilest.ro>
Date: Tue, 28 Jul 2026 18:59:32 +0200
Subject: [PATCH] gitignore: ignore all of backup/, not just SQL dumps

The backup/*.sql* patterns missed pre-change .env copies, which hold
live Stripe and SMTP secrets and were committable.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .gitignore | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 168165b..e9eb31d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,8 +9,10 @@ __pycache__/
 .ruff_cache/
 .venv/
 venv/
-backup/*.sql
-backup/*.sql.gz
+# Everything under backup/ is operational data, never source: DB dumps and
+# pre-change .env copies (which hold live Stripe/SMTP secrets). The earlier
+# backup/*.sql* patterns missed the .env copies — ignore the whole directory.
+backup/
 *.egg-info/
 build/
 dist/