.gitignore

# Node, Composer, Python, and WordPress artifacts
node_modules/
vendor/
*.pyc
__pycache__/
.venv/
venv/

# Editor/IDE/OS
.vscode/
.idea/
.DS_Store
Thumbs.db

# Docker & environment config
.env
*.env
docker/.env
n8n/docker/.env
wordpress/docker/.env
vaultwarden/docker/.env

# Terraform / OpenTofu artifacts (CRITICAL - never commit state or plans)
.terraform/
*.tfstate
*.tfstate.*
*.tfstate.backup
tfplan
*.tfplan
crash.log
crash.*.log
terraform.tfvars
terraform.tfvars.json

# Secrets, tokens, and sensitive config
*-secrets.yml
searxng-docker/searxng/settings.yml
# Production fleet inventory + k8s manifest contain real droplet IPs and
# VPC private IPs — must not be committed to this public repo.
# Real-value working copies are derived from the *.example files alongside them.
searxng-docker/inventory.ini
searxng-docker/k8s-external-ingress.yaml
secret.env
*.bak
*.sqlite
*.pem
*.key
id_rsa
ed25519
*.crt

# OS files
.DS_Store
# Docker volumes/data
docker/*_data/
n8n/docker/data/
wordpress/docker/data/
vaultwarden/docker/data/
*/data/

# SSL, keys, and certificates
docker/ssl/
ssl/


# WordPress specific
wordpress/wp-content/uploads/
wordpress/wp-content/cache/
wordpress/wp-content/upgrade/
wordpress/wp-content/ai-snippets/
wordpress/wp-config.php
wordpress/.htaccess
wordpress/.wordpress-credentials

# n8n workflow exports (optional, if you want only templates in repo)
n8n/workflows/*.json
!n8n/workflows/_TEMPLATE.json

# Vaultwarden (Bitwarden compatible) persistent data
vaultwarden/data/
vaultwarden/attachments/
vaultwarden/config.json
vaultwarden/db.sqlite*
vaultwarden/rsa_key*

# Logs
*.log

# OS junk
ehthumbs.db
# The classic macOS custom-folder-icon file is literally "Icon" + one
# trailing CR byte — written here as a bracket-negation instead of a bare
# "Icon?" glob. A bare "?" (matches any ONE character) was found to instead
# match any longer "Icon*"-prefixed filename in this specific gitignore's
# context (reproduced: landing-purchase/src/components/icons/IconChat.astro
# was silently excluded) — root cause in git's fnmatch not fully pinned
# down, but this form is verified to catch only the intended 5-byte special
# file and nothing longer.
Icon[^a-zA-Z0-9]

# MCP
servers/
knowledge-cache/

# Windsurf/AI Assistant workspace rules (local only)
.windsurf/rules/

# Local agent workspace (session context, worktrees, transcripts) —
# everything ignored except skills/, which are authored, shareable content
.claude/*
!.claude/skills/

# Development artifacts
getMessage
**/getMessage
*security-audit.sh
k8s/cluster-switching/
*CLUSTER_OPTIMIZATION_REPORT.md
n8n/WORKFLOW_MIGRATION_README.md
n8n/n8n-workflow-backup*
WordPress-Performance-Analytics-Strategy.md
cluster-universal-optimizer.sh
INTERNAL_CLUSTER_OPTIMIZATION_REPORT.md
BITNAMI_COMPARISON.md
CERTIFICATE_ISSUE_RESOLUTION.md
PRODUCTION_BEST_PRACTICES.md
*.build

# Deployment state files
.matomo-deploy-state
*.tmp
*.temp

# Helm artifacts
helm/charts/*.tgz
helm/Chart.lock
**/helm/charts/*.tgz
**/helm/Chart.lock

# Backup files
*.sql.gz
*-backup-*
# do-backup-monitor matches *-backup-* above. Track the auditor only.
!scripts/do-backup-monitor/
!scripts/do-backup-monitor/check_stale_backups.py
!scripts/do-backup-monitor/requirements.txt

# Temporary Helm values
values-*.yaml.tmp
custom-values-*.yaml

# Windsurf workspace rules (local configuration, never commit)
.windsurf/rules/
# State files (local tracking only, never commit)
WORK_LOG.md
TIME_LOG.md
WEEKLY_LOG.md
docs/ADR-006-IMPLEMENTATION-SUMMARY.md
docs/ADR-006-FINAL-SUMMARY.md

# Business files (local tracking only)
../_business/SOWandInvoices/WEEKLY_LOG.md
../_business/SOWandInvoices/SOW_*.md
../_business/SOWandInvoices/Invoice_*.md

# Local-only design previews (static harnesses for reviewing a theme/page
# before it's deployed — never part of the shipped repo content)
*.preview.html
offboard-logs/

# Local recovered embed UI snapshots (never commit)
.embed-recovered/
# Local DigitalOcean audit exports. These contain live droplet addresses
# and must never be committed to this public repository.
/DO_Droplet_Inventory_Report.md
/DO_Droplet_Inventory_Report.pdf
/DigitalOcean_Infrastructure_Report.md
/DigitalOcean_Infrastructure_Report.pdf
/DO_Cleanup_and_Security_Audit.md
/DO_Cleanup_and_Security_Audit.pdf
# Local DigitalOcean reports. Live names and addresses.
DO_MONTHLY_COST_REPORT.md
BACKUP_STALE_REPORT.md