# Vault password file - NEVER commit this!
.ansible-vault-pass
~/.ansible-vault-pass

# Temporary files
*.tmp
*.bak
*~
vault.yml.bak.*

# Deploy keys and SSH private keys - NEVER commit these!
*_deploy_key
*_deploy_key.pub
*.pem
*.key
id_rsa
id_ed25519
id_ecdsa

# Python venv (make bootstrap)
.venv/

# Python bytecode
__pycache__/
*.py[cod]
*$py.class

# IDE files
.vscode/
.idea/
*.swp
*.swo

# OS files
.DS_Store
Thumbs.db

.ansible/facts/

# Local data exports (Nextcloud, etc.)
exports/

# Local secrets (Mailcow API, Kuma passwords) — never commit
.env
.env.local

node_modules/