# Secrets — NEVER commit
*.key
*.pem
*.crt
*.priv
secrets/
**/secrets/
*.vault
.vault_pass
.vault_password
ansible/inventory/hosts.yml
ansible/inventory/group_vars/**/vault.yml
wireguard/wg0.conf
wireguard/peers/
.aws/
.env

# OpenTofu / Terraform
.terraform/
.terraform.lock.hcl
*.tfstate
*.tfstate.*
*.tfvars
!*.tfvars.example
crash.log
crash.*.log
override.tf
override.tf.json
backend.hcl
*_override.tf
*_override.tf.json

# Editor / OS
.DS_Store
*.swp
*.swo
.idea/
.vscode/
*~