gitignore, LFS, and Submodules

Keep junk, secrets, and giant files out of your repo, and tame the submodule: the settings that stop you committing node_modules or a 2GB video.

1. What Git tracks (and what "ignore" really means)
2. Ignoring, untracking, and LFS for big files
3. Leaked secrets and the submodule trap