From 7b9d0be9ac71ac11e5b46fbc64cb65dc8b4ac852 Mon Sep 17 00:00:00 2001
From: riricdev <riricdev@local>
Date: Sun, 6 Sep 2026 16:38:49 +0200
Subject: [PATCH] =?UTF-8?q?chore(secrets):=20retire=20les=20webhooks=20Dis?=
 =?UTF-8?q?cord=20et=20l'=C3=A9tat=20runtime=20du=20git=20avant=20h=C3=A9b?=
 =?UTF-8?q?ergement=20public?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- scripts antiflood/ipwatch/uptime-check chargent désormais leur webhook depuis
  scripts/.webhooks (gitignoré) au lieu d'un token en dur
- suppression scripts/antiflood.sh.bak-before-cpu-removal (doublon mort)
- untrack + gitignore des fichiers d'état runtime (.ipwatch-state/offset, .synbase,
  .synstate, .uptime-state) contenant des IP opérationnelles
---
 .gitignore | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.gitignore b/.gitignore
index 2439cdd..fcbd3de 100644
--- a/.gitignore
+++ b/.gitignore
@@ -50,3 +50,11 @@ data/maxspeed/*.log
 
 # sensitive / personal
 duckdns_token_do_not_open.txt
+
+# secrets & runtime state (ne jamais committer)
+scripts/.webhooks
+scripts/.synbase
+scripts/.synstate
+scripts/.uptime-state
+scripts/.ipwatch-offset
+scripts/.ipwatch-state