# =============================================================================
# ~/.config/.gitignore
#
# This file is designed to keep the risky, machine-specific and generated
# parts of ~/.config out of a repository. Only commit plain, portable configs.
#
# BEFORE YOU COMMIT (in this order):
#   1. Run a secret scanner (e.g. `gitleaks detect` or `trufflehog`).
#   2. Re-read the "CREDENTIALS / SECRETS" section below and confirm nothing
#      sensitive is still tracked: `git status` and `git ls-files`.
#   3. Remember these tokens were live on disk; rotate any that may have
#      already been synced or backed up.
# =============================================================================


# -----------------------------------------------------------------------------
# CREDENTIALS / SECRETS (live tokens and keys found here)
# -----------------------------------------------------------------------------
# GitHub OAuth token with repo+workflow scopes
github-copilot/

# Epic Games access/refresh tokens
heroic/

# Deezer client_secret + music-service login tokens
OrpheusDL-GUI/

# Discord account token (localStorage), cookies, chat cache
discord/

# Discord bot token, cookies, session
DiscordBotClient/

# JetBrains license/account key files
JetBrains/

# TLS private keys, password hashes, paired device certificates
sunshine/
Moonlight Game Streaming Project/

# opencode API secret (service.json) — keep opencode.json/cli.json/themes
opencode/service.json

# VPN session/cache and logs
Mullvad VPN/

# Torrent client config can hold WebUI credentials/hash
qBittorrent/

# Google OAuth session cookies + localStorage (AI IDE)
Antigravity/

# VS Code: cookies, localStorage, sessionStorage,
# User/globalStorage/state.vscdb (GitHub auth, extension secrets)
Code/

# Spotify account id / prefs
spotify/

# Generic catch-all for secrets that may appear elsewhere
**/service.json
**/*.pem
**/*.key
**/credentials/
**/oauth.json
**/loginstorage.bin
**/id_rsa*
**/*.env
.env.*


# -----------------------------------------------------------------------------
# BROWSER / ELECTRON APP STATE (cookies, sessions, caches, machine ids)
# -----------------------------------------------------------------------------
cef_user_data/
Electron/
balenaEtcher/

# Chromium profile artifacts wherever they appear
**/Cookies
**/Cookies-journal
**/Local Storage/
**/Session Storage/
**/WebStorage/
**/IndexedDB/
**/Service Worker/
**/Network Persistent State
**/TransportSecurity
**/Shared Dictionary/
**/SharedStorage*
**/Trust Tokens
**/Trust Tokens-journal
**/DIPS
**/Preferences
**/Secure Preferences
**/GPUCache/
**/DawnWebGPUCache/
**/DawnGraphiteCache/
**/Code Cache/
**/Crashpad/
**/Dictionaries/
**/blob_storage/
**/machineid


# -----------------------------------------------------------------------------
# MACHINE-SPECIFIC / GENERATED STATE (not portable between machines)
# -----------------------------------------------------------------------------
dconf/
glib-2.0/
gtk-2.0/
gtk-3.0/
libreoffice/
procps/
pulse/
rc/
pcmanfm/
libfm/
go/
menus/
nitrogen/
obs-studio/
UNDERTALE/
vlc/
kritarc
kritadisplayrc
dconf/user

# fastfetch logos are huge (~576 MB) and machine-specific branding
fastfetch/logos/

# Application debug/log output
**/logs/
**/*.log
**/*.log.*
**/logs-*.log


# -----------------------------------------------------------------------------
# EDITOR / OS NOISE
# -----------------------------------------------------------------------------
.DS_Store
Thumbs.db
*.swp
*.swo
*~
*.bak
*.tmp
*.old