# .gitignore — 3dct-client-mirror

# ── Secrets: staged on disk, deliberately NOT in git history ──
# Live values are in snapshot-*/secrets-DO-NOT-COMMIT/ on the local
# filesystem only. Git history is permanent; a committed key can only be
# removed by rewriting history, which breaks every clone. See README.
secrets-DO-NOT-COMMIT/
.env
.env.local
.env.*.local
*.pem
*.key
id_ed25519*

# ── Regenerable, excluded at rsync time ──
node_modules/
.next/

# ── OS / editor detritus ──
.DS_Store
Thumbs.db