Follow-up to 98ee449f — initial scan missed .crt extension (grep was
pem|env only). Also untracking the crt since it pairs with the pem.
Index changes:
- D docker/haproxy/certs/veza.crt
- M .gitignore (+docker/haproxy/certs/*.crt pattern)
Working tree (ignored, not in commit):
- jwt-private.pem, jwt-public.pem (regen via scripts/generate-jwt-keys.sh)
- config/ssl/{cert,key,veza}.pem (regen via scripts/generate-ssl-cert.sh)
- docker/haproxy/certs/{veza.pem,veza.crt} (copied from config/ssl/)
Dev keys only — no prod secrets rotated here (user confirmed committed
creds were dev placeholders).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>