- Provision public S3 bucket (anonymous list/get) for PR intent artifacts - Grant instance role PutObject and add NixOS systemd timer to publish /memory/pr-intent - Default agent thinking level to high for GPT-5.2/Codex - Make OpenTofu instance management explicit (manage_instances) to prevent accidental fleet destroy Tests: not run (infra/Nix changes)
30 lines
527 B
Plaintext
30 lines
527 B
Plaintext
# Devenv
|
|
.devenv*
|
|
|
|
# OpenTofu
|
|
infra/opentofu/.terraform/
|
|
infra/opentofu/.tofu/
|
|
infra/opentofu/*.tfstate
|
|
infra/opentofu/*.tfstate.backup
|
|
infra/opentofu/*.tfvars
|
|
infra/opentofu/*.auto.tfvars
|
|
!infra/opentofu/example.tfvars
|
|
infra/opentofu/aws/.terraform/
|
|
infra/opentofu/aws/.tofu/
|
|
infra/opentofu/aws/*.tfstate
|
|
infra/opentofu/aws/*.tfstate.backup
|
|
infra/opentofu/aws/*.tfvars
|
|
infra/opentofu/aws/*.auto.tfvars
|
|
|
|
# Secrets
|
|
*.env
|
|
nix/keys/*.agekey
|
|
nix/age-secrets/
|
|
|
|
# Nix build outputs
|
|
result
|
|
result-*
|
|
|
|
# Repo seed workspace
|
|
repo-seeds/
|