From 5ebb9979780fbbc1d3bbd66810de4f20e3d1a7ba Mon Sep 17 00:00:00 2001 From: type-two Date: Sun, 5 Jul 2026 02:04:45 +1000 Subject: [PATCH] security(pii): keep customer SQL dumps out of git and the Docker image MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit customers.sql (610KB phpMyAdmin dump: wp_rmp_users password hashes + real customer names/emails/phones/addresses) sat untracked but matched NEITHER .gitignore NOR .dockerignore, and Dockerfile does COPY . . — so it was one 'git add .' from history and already bakeable into the public image. - .gitignore: customers*.sql (schema.sql stays tracked) - .dockerignore: *.sql (startup DDL is inline in app/main.py; no .sql needed at runtime) Working-tree customers.sql shredded. site-update.sql was already gitignored; now dockerignored too. NOTE: rebuild+redeploy the image to purge copies already baked into layers. Co-Authored-By: Claude Fable 5 --- .dockerignore | 3 +++ .gitignore | 1 + 2 files changed, 4 insertions(+) diff --git a/.dockerignore b/.dockerignore index 76771d0..2f81628 100644 --- a/.dockerignore +++ b/.dockerignore @@ -12,3 +12,6 @@ ingest_raw/ rarw*.txt inertia.txt *.xlsx +# SQL dumps — customer/order PII + WP password hashes. Never bake into the image; +# the app's startup DDL is inline in app/main.py, so no .sql is needed at runtime. +*.sql diff --git a/.gitignore b/.gitignore index b760a93..124e669 100644 --- a/.gitignore +++ b/.gitignore @@ -12,4 +12,5 @@ inertia.txt # live-site MariaDB dumps for 3D-store/editor data work — full site export, carries customer/ # order PII. Local-only; another lane consumes it for robotmonster.party/store racks + editor. site-update.sql +customers*.sql *-dump.sql