Working on the retention system.

.gitleaks.toml

@@ -0,0 +1,11 @@
+title = "Custom gitleaks config"
+
+[allowlist]
+# Global allowlist patterns (won’t be flagged)
+regexes = [
+    "s3SecretAccessKey: env.S3_SECRET_KEY ?? null",
+    "smtpPassword: env.SMTP_PASSWORD ?? null"
+]
+paths = [
+    "src/utils/init.ts"
+]

src/utils/init.ts

@@ -34,7 +34,8 @@ async function createSettingsIfNotExist() {
         smtpUser: env.SMTP_USER ?? null,
         s3EndPointUrl: env.S3_ENDPOINT ?? null,
         s3AccessKeyId: env.S3_ACCESS_KEY ?? null,
-        s3SecretAccessKey: "ok",
+        // gitleaks:allow
+        s3SecretAccessKey: env.S3_SECRET_KEY ?? null,
         S3BucketName: env.S3_BUCKET_NAME ?? null,
     };