# Secrets — never commit to public repo
secrets/
*.secret
*.key
*.pem

# Runtime-generated env files (deploy.sh creates these from OpenBao)
**/config/*.env
!**/.env.example

# Container data volumes
data/

# Build artifacts
proxmox/cloud-init/autoinstall-seed.iso

# OS files
.DS_Store
Thumbs.db

# IDE
.vscode/
.idea/
*.code-workspace
rexicon.txt

# MemPalace (local AI memory tool)
mempalace.yaml
entities.json

# Remember
.remember/

# Claude tasks lock
.claude/scheduled_tasks.lock

# Generated code — produced by CI before build
# templ: web/templates/**/*_templ.go are regenerated from .templ source
platform/services/*/deployment/web/templates/**/*_templ.go
# sqlc: typed Go db client is regenerated from db/queries/*.sql
platform/services/*/deployment/internal/db/sqlcdb/

# Go build artifacts
platform/services/*/deployment/bin/
platform/services/*/deployment/dist/
platform/services/*/deployment/tmp/
# `go build ./cmd/server` drops a bare `server` binary in the deployment dir —
# ignore it (anchored, so it never matches the internal/server/ source dir).
platform/services/*/deployment/server
platform/services/*/deployment/vendor/

# Tailwind CSS build output (regenerated by `make css`)
platform/services/*/deployment/web/static/css/app.css

# Python virtualenvs in inference services
platform/services/inference-*/deployment/app/.venv/
platform/services/inference-*/deployment/app/__pycache__/

# Local .env files (Compose reads these; gitignored per CLAUDE.md secret rules)
platform/services/*/deployment/.env
platform/services/*/deployment/.env.local
