Never modifies an existing note. It only creates today's file when that file is absent, so the blast radius is one new file and re-running is a no-op. Two bugs that only a real run on the server could surface. tempfile creates 0600 and os.replace preserves it, so notes would have landed private in a tree where everything is 0644 and both sftpgo and syncthing read; the previous note's mode is now carried over rather than hardcoded. And --dry-run fell into a degenerate branch once today's file existed, emitting a bare heading exactly when a preview is most wanted, so it now always previews from the newest note that is not today. The unit is sandboxed, and that was verified against the NFS mount rather than assumed: writes to the notes directory succeed, and writes to its parent are refused. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PU5ZFfQFtDTFqqhvMTWdGH
7 lines
63 B
Plaintext
7 lines
63 B
Plaintext
*.keystore
|
|
*.jks
|
|
local.properties
|
|
.gradle/
|
|
build/
|
|
__pycache__/
|