.gitignore

# Local .terraform directories
**/.terraform/*

# .tfstate files
*.tfstate
*.tfstate.*

# Crash log files
crash.log
crash.*.log

# Exclude all .tfvars files, which are likely to contain sensitive data, such as
# password, private keys, and other secrets. These should not be part of version
# control as they are data points which are potentially sensitive and subject
# to change depending on the environment.
*.tfvars
*.tfvars.json

# Ignore override files as they are usually used to override resources locally and so
# are not checked in
override.tf
override.tf.json
*_override.tf
*_override.tf.json

# Include override files you do wish to add to version control using negated pattern
# !example_override.tf

# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
# example: *tfplan*

# Ignore CLI configuration files
.terraformrc
terraform.rc

secret-template.yaml
.cache/
.task/
.venv
.envrc
kubeconfig
age.key

# macOS
.DS_Store
**/.DS_Store

certificates/*

# Provisioning
provisioning/config.env.local
provisioning/secrets/
provisioning/packer/builds/
provisioning/packer/.packer_cache/
provisioning/armbian-build/armbian-build-repo/
provisioning/armbian-build/.staging/
provisioning/artifacts/
provisioning/.mypy_cache/
provisioning/.ruby-lsp/

claude-progress.txt
message.txt

# Python caches
__pycache__/
scripts/__pycache__/

.playwright-mcp

# Blue/green PostgreSQL migration runtime artifacts. Directories are kept
# via .gitkeep so scripts can write into them; transient output (schema
# dumps, snapshots, sequence SQL, log captures) stays out of git.
.migration-state/*/*
!.migration-state/*/.gitkeep

# Local env overrides for the pg-bluegreen Taskfile.
.env