diff options
Diffstat (limited to 'etc/.ignore')
| -rw-r--r-- | etc/.ignore | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/etc/.ignore b/etc/.ignore index 2e2885a..e27185c 100644 --- a/etc/.ignore +++ b/etc/.ignore @@ -42,7 +42,7 @@ # sbctl signed-boot state (keys live here; never commit) /etc/secureboot/* -# WireGuard peer configs contain PrivateKey= — keep local only. -# To version these, template PrivateKey via `pass` at chezmoi apply time. -/etc/systemd/network/99-hodor.netdev -/etc/systemd/network/99-mandibles.netdev +# WireGuard peer configs — .netdev has PrivateKey=, .network has public IPs (PII). +# Keep local only. To version: template secrets via `pass` at chezmoi apply time. +/etc/systemd/network/99-hodor.* +/etc/systemd/network/99-mandibles.* |