/target **/target Cargo.lock .DS_Store # Secrets and credentials. The baseline every repo under ~/Code carries, kept # identical so no repo is the one that forgot. Suffix-matched rather than # `*.env`, which would also catch committed environment files that hold no # secrets (sweep systemd/sweep.env). `.env.example` is a tracked template and # is negated back in. .env .env.* !.env.example *.pem *.key *.p8 *.p12 *.pfx credentials.json