# ---> Nix
# Ignore build outputs from performing a nix-build or `nix build` command
result
result-*

# Disko's proxmox-* image-builder writes the finished .raw disk image
# directly into the current directory, not into a result-* symlink (see
# docs/proxmox-images.md, scripts/create-proxmox-resource.sh) — several GB
# each, never meant to be committed.
*.raw

# Ignore automatically generated direnv output
.direnv

# Python bytecode cache (scripts/lib/*.py)
__pycache__/
*.pyc

# Locally-generated SSH host keys staged for transfer to a new machine
# during install (see scripts/prepare-host-key.sh) — never commit these.
host-keys/

# Temporary Milestone 1 audit checklist (remove-sensetive-info-refactor.md)
# - working notes only, never committed, deleted once every row is rotated.
secrets-inventory.md