#devops

Storing credentials in the repo: SOPS + age

Keeping secret values encrypted inside the git repo: setting up SOPS + age, the per-environment recipient model, decrypting at runtime, the team and CI flow, and the things to watch out for.

Free Custom Domain Email with Cloudflare and Gmail

Receiving and sending email from your own domain without running a server or paying anything: Cloudflare Email Routing for inbound, plus a Gmail app password and Send mail as SMTP setup for outbound.

Local Ignore Rules in Git: .git/info/exclude and core.excludesFile

Hiding personal files dropped into the project root without polluting .gitignore or pushing them to the team. .git/info/exclude, core.excludesFile, and the precedence order.