From 1e5a241f051aa12f1a41e2bcf877d24c8ebe79e2 Mon Sep 17 00:00:00 2001
From: jing <jing@JING5.local>
Date: Mon, 13 Jul 2026 21:57:29 +1000
Subject: [PATCH] gitignore API credentials (openskycredentials.json + secret
 patterns)

The OpenSky OAuth2 client credentials live in the repo dir as a JSON file;
gitignore them (and .env/*.secret/*credentials*.json) so they can never be
accidentally committed or shipped. They stay server-side only.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .gitignore | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitignore b/.gitignore
index 3c1b716..d4918c6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,8 @@
 __pycache__/
 # Local recorder database (record.py) — dev-only, never committed or deployed.
 data/
+# Secrets — API credentials must never be committed or deployed (server-side only).
+openskycredentials.json
+*credentials*.json
+*.secret
+.env