# Homelab bootstrap — gitleaks allowlist (tests, examples, placeholders)
title = "homelab gitea bootstrap"

[allowlist]
description = "Test fixtures and example configs are not production secrets"
paths = [
  '''(?i).*\.test\.(ts|tsx|js|jsx|py)$''',
  '''(?i).*\.spec\.(ts|tsx|js|jsx)$''',
  '''(?i).*/tests/.*''',
  '''(?i).*/__tests__/.*''',
  '''(?i).*\.example\.(yml|yaml|env|json|toml)$''',
  '''(?i).*vault\.example\.(yml|yaml)$''',
  '''(?i).*\.env\.example$''',
]
regexes = [
  '''(?i)(invalid|fake|dummy|placeholder|example|changeme|change_me|not-a-real)''',
  '''(?i)sk-or-invalid''',
  '''(?i)msk-or-invalid''',
]
