From cb57347d5167e5f6afa527542315f440a672aff7 Mon Sep 17 00:00:00 2001 From: ospab Date: Thu, 30 Jul 2026 20:25:28 +0300 Subject: [PATCH] chore: never let an Android signing key be committed ostp-upload.jks was sitting untracked but NOT ignored in the repo root, so a single `git add -A` would have swept the private upload key into a public repository. That key is unrecoverable-by-design: Android refuses to update an app across a signing-key change, so leaking it (or losing it) means every existing install is stranded and can only be fixed by a manual uninstall. Ignores *.jks, *.keystore and key.properties at the root. The ostp-lab/ line in this diff is not mine - it was already in the working tree and is carried along because it shares the file. --- .gitignore | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.gitignore b/.gitignore index 57a23ec..7bddc47 100644 --- a/.gitignore +++ b/.gitignore @@ -26,6 +26,13 @@ test_route.ps1 config.json wintun.dll +# Android signing keys. The upload keystore is the ONE key every published APK +# must be signed with (Android refuses to update an app across a key change), +# so losing or leaking it is unrecoverable — it can never be committed. +*.jks +*.keystore +key.properties + # Server runtime cache (public IP autodetect) — must never be committed, # it's regenerated locally and leaks whatever host it ran on last. .ostp_public_ip @@ -39,6 +46,7 @@ turn-harvesting-idea.md # Private tooling (closed-source) ostp-prober/ +ostp-lab/ ostp-brain/