From d259857fabedc3fa7bfc7f57a52f38d3737437d9 Mon Sep 17 00:00:00 2001 From: Fi3w0 Date: Thu, 20 Aug 2026 20:09:24 +0200 Subject: [PATCH] chore: scaffold repository layout Directory skeleton from the project plan, held open with .gitkeep so the layout survives a clone. The .gitignore blocks credentials, kubeconfigs, terraform state and local editor state, and keeps *-sealed.yaml committable since those are encrypted on purpose. --- .forgejo/workflows/.gitkeep | 0 .gitignore | 108 ++++++++++++++++++++++++++ apps/api/migrations/.gitkeep | 0 apps/loadgen/.gitkeep | 0 apps/web/.gitkeep | 0 build/.gitkeep | 0 deploy/base/.gitkeep | 0 deploy/overlays/dev/.gitkeep | 0 deploy/overlays/prod/.gitkeep | 0 deploy/rollouts/.gitkeep | 0 deploy/secrets/.gitkeep | 0 docs/memoria/.gitkeep | 0 observability/alerts/.gitkeep | 0 observability/dashboards/.gitkeep | 0 observability/otel-collector/.gitkeep | 0 scripts/.gitkeep | 0 terraform/infra/.gitkeep | 0 terraform/platform/.gitkeep | 0 18 files changed, 108 insertions(+) create mode 100644 .forgejo/workflows/.gitkeep create mode 100644 .gitignore create mode 100644 apps/api/migrations/.gitkeep create mode 100644 apps/loadgen/.gitkeep create mode 100644 apps/web/.gitkeep create mode 100644 build/.gitkeep create mode 100644 deploy/base/.gitkeep create mode 100644 deploy/overlays/dev/.gitkeep create mode 100644 deploy/overlays/prod/.gitkeep create mode 100644 deploy/rollouts/.gitkeep create mode 100644 deploy/secrets/.gitkeep create mode 100644 docs/memoria/.gitkeep create mode 100644 observability/alerts/.gitkeep create mode 100644 observability/dashboards/.gitkeep create mode 100644 observability/otel-collector/.gitkeep create mode 100644 scripts/.gitkeep create mode 100644 terraform/infra/.gitkeep create mode 100644 terraform/platform/.gitkeep diff --git a/.forgejo/workflows/.gitkeep b/.forgejo/workflows/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..5e21892 --- /dev/null +++ b/.gitignore @@ -0,0 +1,108 @@ +# --------------------------------------------------------------------------- +# Owner documents. Held back deliberately for now, not permanently. +# Note that agents cloning this repo will not receive AGENTS.md while it is +# listed here, so they have to be handed the rules another way. +# --------------------------------------------------------------------------- +AGENTS.md +PLAN.md + +# --------------------------------------------------------------------------- +# Secrets and credentials. Nothing in this block ever reaches the repository. +# --------------------------------------------------------------------------- +.env +.env.* +!.env.example +*.env + +# private keys and certificates +*.pem +*.key +*.p12 +*.pfx +*.jks +id_rsa* +id_ecdsa* +id_ed25519* +!*.pub + +# cluster and cloud credentials +*.kubeconfig +kubeconfig +.kube/ +.netrc +.npmrc +credentials +credentials.json +service-account*.json + +# sealed-secrets private key backups. Losing this file means losing every +# sealed secret, so it is backed up outside the repo and never inside it. +*sealed-secrets-key*.yaml + +# Plaintext inputs to Sealed Secrets. The sealed output (*-sealed.yaml) is +# encrypted and IS meant to be committed, so it is not ignored here. +deploy/secrets/*.plain.yaml +deploy/secrets/*.unsealed.yaml + +# --------------------------------------------------------------------------- +# AI assistants, IDEs, editors. Local tooling, not part of the project. +# --------------------------------------------------------------------------- +.claude/ +.codex/ +.cursor/ +.aider* +.continue/ +.windsurf/ +.github-copilot/ +CLAUDE.local.md + +.vscode/ +.idea/ +*.iml +.fleet/ +.zed/ +.helix/ +.nvim.lua +.nvimrc +*.sublime-project +*.sublime-workspace +.vim/ +*.swp +*.swo +*~ +.\#* +\#*\# + +.direnv/ +.envrc + +# --------------------------------------------------------------------------- +# Terraform. The lock file is committed on purpose; state never is. +# --------------------------------------------------------------------------- +.terraform/ +*.tfstate +*.tfstate.* +*.tfvars +!*.tfvars.example +crash.log +crash.*.log +override.tf +override.tf.json + +# --------------------------------------------------------------------------- +# Build output and local scratch +# --------------------------------------------------------------------------- +bin/ +dist/ +node_modules/ +*.test +*.out +coverage.* +vendor/ + +# --------------------------------------------------------------------------- +# OS noise +# --------------------------------------------------------------------------- +.DS_Store +Thumbs.db +desktop.ini diff --git a/apps/api/migrations/.gitkeep b/apps/api/migrations/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/apps/loadgen/.gitkeep b/apps/loadgen/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/apps/web/.gitkeep b/apps/web/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/build/.gitkeep b/build/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/base/.gitkeep b/deploy/base/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/overlays/dev/.gitkeep b/deploy/overlays/dev/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/overlays/prod/.gitkeep b/deploy/overlays/prod/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/rollouts/.gitkeep b/deploy/rollouts/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/deploy/secrets/.gitkeep b/deploy/secrets/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/docs/memoria/.gitkeep b/docs/memoria/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/observability/alerts/.gitkeep b/observability/alerts/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/observability/dashboards/.gitkeep b/observability/dashboards/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/observability/otel-collector/.gitkeep b/observability/otel-collector/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/scripts/.gitkeep b/scripts/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/terraform/infra/.gitkeep b/terraform/infra/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/terraform/platform/.gitkeep b/terraform/platform/.gitkeep new file mode 100644 index 0000000..e69de29