n0mad1k
6538b09b7d
- providers/webrunner.yml: wrap loop_var under loop_control in all three provider provision tasks — Ansible was rejecting loop_var as a conflicting action statement alongside include_tasks - deployment_engine.py: strip _SECRET_KEYS (tokens, passwords, api keys) from create_extra_vars() — credentials are already set as env vars by set_provider_environment(), no need to pass them through --extra-vars where they end up in process listings and logs - deployment_engine.py: remove debug log line that dumped the full ansible-playbook command including all extra-vars JSON with live creds - deployment_engine.py: create deployment log files with 0o600 permissions instead of world-readable 0o644 - deploy_webrunner.py: remove load_vars_file() call that was pulling phishing module creds (SMTP password, gophish port, domain) into the webrunner config dict — all provider creds already collected by gather_provider_config() - deploy_webrunner.py: remove unused select_provider import - .gitignore: narrow 'deployment*' glob to specific artifact patterns so deployment_engine.py is no longer excluded from tracking
111 lines
1.0 KiB
Plaintext
111 lines
1.0 KiB
Plaintext
vars.yaml
|
|
venv
|
|
deployment_*.log
|
|
deployment_info_*.txt
|
|
node_chunks_*.json
|
|
scanner_ips_*.txt
|
|
config.yml
|
|
logs/
|
|
domainhunter/
|
|
infrastructure_state_*.json
|
|
# OS-specific files
|
|
.DS_Store
|
|
Thumbs.db
|
|
desktop.ini
|
|
|
|
# VS Code settings
|
|
.vscode/
|
|
.history/
|
|
|
|
# Node.js
|
|
node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
pnpm-debug.log*
|
|
package-lock.json
|
|
yarn.lock
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*.pyo
|
|
*.pyd
|
|
*.egg
|
|
*.egg-info/
|
|
dist/
|
|
build/
|
|
.env
|
|
.venv/
|
|
venv/
|
|
Pipfile.lock
|
|
|
|
# C# / .NET
|
|
bin/
|
|
obj/
|
|
*.user
|
|
*.suo
|
|
*.userosscache
|
|
*.sln.docstates
|
|
*.vsp
|
|
*.pidb
|
|
*.mdb
|
|
*.cache
|
|
*.pdb
|
|
|
|
# Java
|
|
*.class
|
|
*.jar
|
|
*.war
|
|
*.ear
|
|
target/
|
|
|
|
# Logs and temp files
|
|
*.log
|
|
*.tmp
|
|
*.bak
|
|
*.swp
|
|
*.swo
|
|
*.swn
|
|
*.orig
|
|
*.rej
|
|
|
|
# Secrets
|
|
.env.local
|
|
.env.*.local
|
|
.envrc
|
|
secrets.*
|
|
credentials.json
|
|
|
|
# GitHub Copilot
|
|
*.copilot*
|
|
|
|
# Test output
|
|
coverage/
|
|
.nyc_output/
|
|
test-output/
|
|
|
|
# IDEs and editors
|
|
.idea/
|
|
*.iml
|
|
*.code-workspace
|
|
|
|
# Others
|
|
*.sqlite3
|
|
*.db
|
|
*.tar.gz
|
|
*.zip
|
|
*.7z
|
|
*.tgz
|
|
|
|
# Ignore by file type (optional)
|
|
*.exe
|
|
*.dll
|
|
*.msi
|
|
*.apk
|
|
*.ipa
|
|
|
|
# Ignore personal scripts
|
|
scripts/dev/*
|
|
.claude/
|