# secrets Nothing secret lives in this repo. Work credentials go in a `.env` next to `bootstrap.sh`, and that path is gitignored. I keep the real values in `pass` (the standard unix password store), not here.