# Local artifacts / secrets — must never be committed
*-openrc
*.tar.gz
*.tar.zst
backups/
.vault-keys/
*.pem
*.key
*.crt
# Keep CA certs that are NOT secrets if explicitly added in docs/
!docs/**/*.crt

# Python
__pycache__/
*.pyc
*.pyo
.venv/
venv/

# Editor
.vscode/
.idea/
*.swp
*~

# Logs
*.log
deploy-*.log

# Juju local artifacts
*.bundle
bundle-pre-rebuild.yaml
juju-status-pre-rebuild.yaml

# NetBox token files
.netbox-env
.env