/target
/.sccache-cache
*.db
*.db-shm
*.db-wal
.env
*.tmp
data/
.claude/

# ruflo runtime state
agentdb.rvf
agentdb.rvf.lock

# IDE project files
.idea/

# Android signing keystores — never commit
*.jks
*.jks.bak
*.jks.bak*
*.keystore

# Kubernetes secrets — apply manually, never commit
deploy/matomo-secret.yaml
deploy/*-secret.yaml
deploy/*-auth-secret.yaml