Finally pushed my gentoo dotfiles :3

.gitignore

@@ -0,0 +1,149 @@
+# =============================================================================
+# ~/.config/.gitignore
+#
+# This file is designed to keep the risky, machine-specific and generated
+# parts of ~/.config out of a repository. Only commit plain, portable configs.
+#
+# BEFORE YOU COMMIT (in this order):
+#   1. Run a secret scanner (e.g. `gitleaks detect` or `trufflehog`).
+#   2. Re-read the "CREDENTIALS / SECRETS" section below and confirm nothing
+#      sensitive is still tracked: `git status` and `git ls-files`.
+#   3. Remember these tokens were live on disk; rotate any that may have
+#      already been synced or backed up.
+# =============================================================================
+
+
+# -----------------------------------------------------------------------------
+# CREDENTIALS / SECRETS (live tokens and keys found here)
+# -----------------------------------------------------------------------------
+# GitHub OAuth token with repo+workflow scopes
+github-copilot/
+
+# Epic Games access/refresh tokens
+heroic/
+
+# Deezer client_secret + music-service login tokens
+OrpheusDL-GUI/
+
+# Discord account token (localStorage), cookies, chat cache
+discord/
+
+# Discord bot token, cookies, session
+DiscordBotClient/
+
+# JetBrains license/account key files
+JetBrains/
+
+# TLS private keys, password hashes, paired device certificates
+sunshine/
+Moonlight Game Streaming Project/
+
+# opencode API secret (service.json) — keep opencode.json/cli.json/themes
+opencode/service.json
+
+# VPN session/cache and logs
+Mullvad VPN/
+
+# Torrent client config can hold WebUI credentials/hash
+qBittorrent/
+
+# Google OAuth session cookies + localStorage (AI IDE)
+Antigravity/
+
+# VS Code: cookies, localStorage, sessionStorage,
+# User/globalStorage/state.vscdb (GitHub auth, extension secrets)
+Code/
+
+# Spotify account id / prefs
+spotify/
+
+# Generic catch-all for secrets that may appear elsewhere
+**/service.json
+**/*.pem
+**/*.key
+**/credentials/
+**/oauth.json
+**/loginstorage.bin
+**/id_rsa*
+**/*.env
+.env.*
+
+
+# -----------------------------------------------------------------------------
+# BROWSER / ELECTRON APP STATE (cookies, sessions, caches, machine ids)
+# -----------------------------------------------------------------------------
+cef_user_data/
+Electron/
+balenaEtcher/
+
+# Chromium profile artifacts wherever they appear
+**/Cookies
+**/Cookies-journal
+**/Local Storage/
+**/Session Storage/
+**/WebStorage/
+**/IndexedDB/
+**/Service Worker/
+**/Network Persistent State
+**/TransportSecurity
+**/Shared Dictionary/
+**/SharedStorage*
+**/Trust Tokens
+**/Trust Tokens-journal
+**/DIPS
+**/Preferences
+**/Secure Preferences
+**/GPUCache/
+**/DawnWebGPUCache/
+**/DawnGraphiteCache/
+**/Code Cache/
+**/Crashpad/
+**/Dictionaries/
+**/blob_storage/
+**/machineid
+
+
+# -----------------------------------------------------------------------------
+# MACHINE-SPECIFIC / GENERATED STATE (not portable between machines)
+# -----------------------------------------------------------------------------
+dconf/
+glib-2.0/
+gtk-2.0/
+gtk-3.0/
+libreoffice/
+procps/
+pulse/
+rc/
+pcmanfm/
+libfm/
+go/
+menus/
+nitrogen/
+obs-studio/
+UNDERTALE/
+vlc/
+kritarc
+kritadisplayrc
+dconf/user
+
+# fastfetch logos are huge (~576 MB) and machine-specific branding
+fastfetch/logos/
+
+# Application debug/log output
+**/logs/
+**/*.log
+**/*.log.*
+**/logs-*.log
+
+
+# -----------------------------------------------------------------------------
+# EDITOR / OS NOISE
+# -----------------------------------------------------------------------------
+.DS_Store
+Thumbs.db
+*.swp
+*.swo
+*~
+*.bak
+*.tmp
+*.old