Editing .env leaves .env.bak-<timestamp> beside it, and only the anchored /.env pattern was ignored - so the backup showed up as an untracked file holding the RTSP password in plaintext, one `git add -A` away from being committed. The pattern that protects the original has to protect its copies. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Qiy5iKfz4L8S4vRaYPBdaU
2.0 KiB
2.0 KiB