# ---------------------------------------------------------------------------
# Environment & secrets
# ---------------------------------------------------------------------------
# config.py loads .env via load_dotenv(). Under APP_ROLE=full this carries
# APP_SECRET, DATABASE_URL, OIDC_CLIENT_SECRET and SMTP credentials.
.env
.env.*
*.env
!.env.example

# Kerberos / FreeIPA -- ipa.py kinit's with a keytab
*.keytab
krb5cc_*
*.ccache

# TLS material
*.pem
*.key
*.crt
*.p12
*.pfx

# The live unit carries host-specific paths and the local account name.
# Ship the template instead; see sticknife-home.service.example.
*.service
!*.service.example

# ---------------------------------------------------------------------------
# Databases
# ---------------------------------------------------------------------------
# app/schema.sql is the tracked schema; the populated database is not.
*.db
*.db-journal
*.db-wal
*.db-shm
*.sqlite
*.sqlite3

# ---------------------------------------------------------------------------
# Python
# ---------------------------------------------------------------------------
__pycache__/
*.py[cod]
*.egg-info/
*.egg
dist/
build/
.mypy_cache/
.pytest_cache/
.ruff_cache/

# ---------------------------------------------------------------------------
# Virtual environments
# ---------------------------------------------------------------------------
venv/
venv*/
.venv/

# ---------------------------------------------------------------------------
# Logs
# ---------------------------------------------------------------------------
*.log
logs/

# ---------------------------------------------------------------------------
# IDE & editor
# ---------------------------------------------------------------------------
.vscode/
.idea/
*.swp
*.swo
*~
.DS_Store
Thumbs.db

# ---------------------------------------------------------------------------
# Backup & temp files
# ---------------------------------------------------------------------------
*.bak
*.tmp
*.temp