# Terraform state and credentials — never commit
**/.terraform/
**/*.tfstate
**/*.tfstate.*
**/terraform.tfvars
**/.terraform.lock.hcl
# keep .terraform.lock.hcl for reproducibility if you want — uncomment to track it:
# !**/.terraform.lock.hcl

# Ansible secrets and generated files
ansible/inventory/host_vars/*/vault.yml
ansible/.vault_pass
**/*.retry

# Docker secrets
stacks/docker/secrets/stack-secrets.env
stacks/docker/secrets/*.txt
stacks/raspi/default-environment.env.local

# SOPS / age private keys
*.age
.sops.yaml.local

# Editor and OS
.DS_Store
*.swp
*.swo
*~
.idea/
.vscode/settings.json

# MkDocs build output
site/

# Python
__pycache__/
*.pyc
.venv/
venv/

# Logs
*.log