# secrets / env
.env
backend/.env
# Per-env app configs (secrets; not committed). example.config.yaml is the
# committed template and must stay free of real credentials.
backend/configs/*.config.yaml
!backend/configs/example.config.yaml
*.local
client_secret_*.json

# python
__pycache__/
*.py[cod]
.venv/
venv/
*.egg-info/
.pytest_cache/
.mypy_cache/
.ruff_cache/

# node / next
node_modules/
.next/
out/
clients/typescript/dist/
mcp/dist/
npm-debug.log*
.pnpm-debug.log*
*.tsbuildinfo

# data / volumes
pgdata*/
*.log
.tmp-*.json

# os / editor
.DS_Store
.idea/
.vscode/

# Monitoring inputs for create-secrets.sh — droplet IPs, the LiveKit metrics
# password and the Grafana OAuth client. Same reason as the config files.
deployment/prod/scripts/monitoring.env
