From ef0b64c86ba970ca6d8676a6ba10d1dd2486a54d Mon Sep 17 00:00:00 2001
From: Eric Gullickson <16152721+ericgullickson@users.noreply.github.com>
Date: Tue, 30 Dec 2025 10:14:00 -0600
Subject: [PATCH] fix: Added config directory to checkout for prod deployment

---
 .gitea/workflows/production.yaml               |  8 +++++++-
 .gitignore                                     |  5 -----
 secrets/.gitignore                             | 18 ------------------
 secrets/app/auth0-client-secret.txt.example    |  1 +
 .../app/auth0-management-client-id.txt.example |  1 +
 .../auth0-management-client-secret.txt.example |  1 +
 secrets/app/google-maps-api-key.txt.example    |  1 +
 secrets/app/postgres-password.txt.example      |  1 +
 secrets/app/resend-api-key.txt.example         |  1 +
 9 files changed, 13 insertions(+), 24 deletions(-)
 delete mode 100644 secrets/.gitignore
 create mode 100644 secrets/app/auth0-client-secret.txt.example
 create mode 100644 secrets/app/auth0-management-client-id.txt.example
 create mode 100644 secrets/app/auth0-management-client-secret.txt.example
 create mode 100644 secrets/app/google-maps-api-key.txt.example
 create mode 100644 secrets/app/postgres-password.txt.example
 create mode 100644 secrets/app/resend-api-key.txt.example

diff --git a/.gitea/workflows/production.yaml b/.gitea/workflows/production.yaml
index 22262be..b5b60fd 100644
--- a/.gitea/workflows/production.yaml
+++ b/.gitea/workflows/production.yaml
@@ -247,13 +247,19 @@ jobs:
     needs: [validate, deploy-prod, verify-prod]
     if: failure()
     steps:
-      - name: Checkout scripts only
+      - name: Checkout scripts
         uses: actions/checkout@v4
         with:
           sparse-checkout: scripts/
           sparse-checkout-cone-mode: true
           fetch-depth: 1
 
+      - name: Checkout config
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: config/
+          sparse-checkout-cone-mode: true
+
       - name: Execute rollback
         run: |
           cd "$DEPLOY_PATH"
diff --git a/.gitignore b/.gitignore
index ec96189..d74b407 100644
--- a/.gitignore
+++ b/.gitignore
@@ -13,11 +13,6 @@ coverage/
 .venv
 .playwright-mcp
 
-#Data Import Files
-data/vehicle-etl/vehapi.key
-data/vehicle-etl/snapshots/*
-!data/vehicle-etl/snapshots/.gitkeep
-
 # K8s-aligned secret mounts (real files ignored; examples committed)
 secrets/**
 !secrets/
diff --git a/secrets/.gitignore b/secrets/.gitignore
deleted file mode 100644
index 1d58829..0000000
--- a/secrets/.gitignore
+++ /dev/null
@@ -1,18 +0,0 @@
-# Secrets Management .gitignore
-# Ensure no secrets are committed to version control
-
-# All secret files
-*.txt
-!*.example.txt
-
-# Secret directories (but keep structure)
-*/
-!.gitignore
-
-# Backup files
-*.bak
-*.backup
-
-# Temporary files
-*.tmp
-*.temp
\ No newline at end of file
diff --git a/secrets/app/auth0-client-secret.txt.example b/secrets/app/auth0-client-secret.txt.example
new file mode 100644
index 0000000..b2ac446
--- /dev/null
+++ b/secrets/app/auth0-client-secret.txt.example
@@ -0,0 +1 @@
+REPLACE_WITH_AUTH0_CLIENT_SECRET
diff --git a/secrets/app/auth0-management-client-id.txt.example b/secrets/app/auth0-management-client-id.txt.example
new file mode 100644
index 0000000..16101ac
--- /dev/null
+++ b/secrets/app/auth0-management-client-id.txt.example
@@ -0,0 +1 @@
+your-auth0-management-client-id
diff --git a/secrets/app/auth0-management-client-secret.txt.example b/secrets/app/auth0-management-client-secret.txt.example
new file mode 100644
index 0000000..d881276
--- /dev/null
+++ b/secrets/app/auth0-management-client-secret.txt.example
@@ -0,0 +1 @@
+your-auth0-management-client-secret
diff --git a/secrets/app/google-maps-api-key.txt.example b/secrets/app/google-maps-api-key.txt.example
new file mode 100644
index 0000000..4b2f068
--- /dev/null
+++ b/secrets/app/google-maps-api-key.txt.example
@@ -0,0 +1 @@
+REPLACE_WITH_GOOGLE_MAPS_API_KEY
diff --git a/secrets/app/postgres-password.txt.example b/secrets/app/postgres-password.txt.example
new file mode 100644
index 0000000..66c6eb9
--- /dev/null
+++ b/secrets/app/postgres-password.txt.example
@@ -0,0 +1 @@
+REPLACE_WITH_APPLICATION_DB_PASSWORD
diff --git a/secrets/app/resend-api-key.txt.example b/secrets/app/resend-api-key.txt.example
new file mode 100644
index 0000000..a7c7266
--- /dev/null
+++ b/secrets/app/resend-api-key.txt.example
@@ -0,0 +1 @@
+re_xxxxxxxxxxxxxxxxxxxxxxxxxxxx