# WireGuard configs (contains private keys)
*/wireguard.nix

# OpenTofu
*.tfstate*
kubernetes/**/.terraform/

# OpenCode
opencode.json

# Nix build results
result
result-*

# Generated PKI certs
kubernetes/pki/out/

# SSH private keys
kubernetes/ssh-key
harden/debug/ssh-key
13-inch-thin-cannon/tests/ssh-key

# Flattened admin kubeconfig fetched from the master (control-machine tooling)
kubernetes/kubeconfig

# ISO test artifacts
13-inch-thin-cannon/tests/*.qcow2
13-inch-thin-cannon/tests/*.pid
13-inch-thin-cannon/tests/*.log
13-inch-thin-cannon/tests/*.out
13-inch-thin-cannon/tests/ovmf/
13-inch-thin-cannon/tests/ovmf-vars.fd

# qemu/kernel debug artifacts
harden/debug/*.log
harden/debug/*.pid

# Generated Ansible inventory
kubernetes/ansible/inventory.ini

# age-encrypted secrets
secrets/*.age
!secrets/.gitkeep
kubernetes/.cache/