__pycache__/
*.py[cod]
.kube/*
!.kube/config
.DS_Store
.terraform*
terraform.tfstate*
terraform.tfvars
tf/**/alpo-*.yaml
tf/**/kubeconfig_*
tfplan
charts
**/talos/clusterconfig/
**/talos/*.iso
**/talos/talosconfig
!**/talos/talconfig.yaml
**/talos/talsecret.yaml
**/talos/aurora
**/talos/.DS_Store

next

# SOPS private keys - NEVER commit these
*.private.asc
.sops.private.asc
.kuberlr/darwin-arm64/kubectl1.33.3

# Talos generated files (contain unencrypted secrets)
**/bootstrap/talos/clusterconfig/
**/bootstrap/talos/talsecret.yaml

# Hardware discovery info
**/hardware-info/

# Kubeconfig files (contain cluster access credentials)
**/kubeconfig

# Test results (may contain sensitive network info)
**/thunderbolt-results*.txt

# Decrypted files
*.dec
*.decrypted

# Temporary files
*.tmp
*.bak
*.swp
tailscale/validate.sh
clusters/common/bootstrap/flux/secret.yaml

# Python virtual environment
venv/

# Tailscale daemon PID (created by CI runners)
tailscaled.pid
.claude/worktrees/
