note where secrets actually live

2025-11-12 20:15:10 +00:00
parent 4751449e9d
commit db5ce288f6
1 changed files with 5 additions and 0 deletions
--- a/secrets/README.md
+++ b/secrets/README.md
@@ -0,0 +1,5 @@
+# secrets
+
+Nothing secret lives in this repo. Work credentials go in a `.env` next to
+`bootstrap.sh`, and that path is gitignored. I keep the real values in `pass`
+(the standard unix password store), not here.