From ef3604e5a28aaae99fa022f0c1459a7884e9203a Mon Sep 17 00:00:00 2001
From: Alexandra von Criegern <plutonik@gmx.net>
Date: Tue, 11 Jul 2023 12:04:15 +0200
Subject: [PATCH 1/2] chore(gitignore): Exclude "dot" files from revision

---
 .gitignore | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 6e29cdd5..c8ff585e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
+.*
+!.gitignore
 build/*
-.existdb.json
 modules/twitter-secrets.xqm
-.DS_Store
 expath-pkg.xml
 repo.xml

From 0454a2234eb1e68530c6a2a7def8b73ca7c2f3c3 Mon Sep 17 00:00:00 2001
From: Alexandra von Criegern <plutonik@gmx.net>
Date: Tue, 11 Jul 2023 12:10:25 +0200
Subject: [PATCH 2/2] fix(module): Protect twitter-secrets module

Removed guest access to twitter-secrets.xqm via post.install script, as it contains sensitive information.
---
 post-install.xql | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/post-install.xql b/post-install.xql
index af5efbab..5a7a868c 100644
--- a/post-install.xql
+++ b/post-install.xql
@@ -58,6 +58,13 @@ let $resources :=
             <owner>twitter-agent:twitter-agents</owner>
             <mode>rwxrwsr-x</mode>
         </resource>
+        <resource>
+            <!-- We have removed guest access to this file, as it contains sensitive information  -->
+            <path>/db/apps/twitter/modules/twitter-secrets.xqm</path>
+            <type>file</type>
+            <owner>twitter-agent:twitter-agents</owner>
+            <mode>rwxrwx---</mode>
+        </resource>
     </resources>
 
 let $create-users :=