# Secrets — never commit
.env
.sops-age-key.txt
clouds.yaml
*.tfvars
*.pem
*.key

# Terraform local state and cache
terraform/**/.terraform/
terraform/**/terraform.tfstate
terraform/**/terraform.tfstate.backup
terraform/**/.terraform.tfstate.lock.info

# Nix build outputs
result
result-*

# Editor / OS cruft
*.swp
.direnv/
.DS_Store

# Local PDFs in repo root (Infomaniak invoices, etc.)
*.pdf