Daily SQLite backup to the NetBackup SMB share plus restore/import/export helpers. SMB credentials moved out of the scripts into ~/.smbcredentials (mode 600) and are passed to smbclient via -A instead of -U "user%pass". This keeps the password out of version control and out of the process list, where -U exposes it to any local user through ps.
22 lines
360 B
Plaintext
22 lines
360 B
Plaintext
# OS / editor cruft
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.swp
|
|
*~
|
|
|
|
# SMB credentials - NEVER commit these.
|
|
# Real file lives at ~/.smbcredentials (mode 600). This guards against anyone
|
|
# dropping a copy inside the repo.
|
|
.smbcredentials
|
|
*.smbcredentials
|
|
smb.credentials
|
|
*.env
|
|
.env.*
|
|
|
|
# Backup output (the script uses /tmp, but guard local drops)
|
|
*.db
|
|
*.db-journal
|
|
|
|
# Logs
|
|
*.log
|