# Secure starter .gitignore

#

# Keep secrets out of git before the first commit.

# Environment and local configuration

.env

.env.*

!.env.example

!.env.sample

*.env

*.local

*.secret

*.secrets

secrets/

secret/

credentials/

credential/

config/local.*

config/secret.*

config/secrets.*

# Keys, certificates, and credentials

*.pem

*.key

*.p8

*.p12

*.pfx

*.crt

*.cer

*.csr

*.jks

*.keystore

id_rsa

id_rsa.*

id_dsa

id_dsa.*

id_ecdsa

id_ecdsa.*

id_ed25519

id_ed25519.*

*.pub

*.asc

*.gpg

*.kdbx

*.age

*.sops.*

# Cloud and service credentials

.aws/

.azure/

.gcloud/

.config/gcloud/

.docker/config.json

firebase-debug.log

service-account*.json

google-service-account*.json

*-service-account.json

*.credentials.json

credentials.json

# Dependency directories

node_modules/

vendor/

bower_components/

.pnpm-store/

.yarn/

!.yarn/releases/

!.yarn/plugins/

!.yarn/sdks/

!.yarn/versions/

# Build and release output

bin/

dist/

build/

out/

target/

coverage/

.coverage

coverage.*

*.cover

*.out

*.test

*.prof

*.pyc

*.pyo

*.class

*.o

*.so

*.dylib

*.dll

*.exe

# Logs and runtime files

logs/

log/

*.log

*.pid

*.seed

*.pid.lock

npm-debug.log*

yarn-debug.log*

yarn-error.log*

pnpm-debug.log*

# Caches and temporary files

.cache/

.tmp/

tmp/

temp/

.temp/

.turbo/

.parcel-cache/

.next/

.nuxt/

.vite/

.svelte-kit/

.pytest_cache/

.mypy_cache/

.ruff_cache/

.tox/

.nox/

.gradle/

.idea_modules/

# Databases and local state

*.db

*.sqlite

*.sqlite3

*.dump

*.sql

*.bak

*.backup

*.swp

*.swo

*.lock.local

# Editor, IDE, and OS files

.DS_Store

Thumbs.db

Desktop.ini

.idea/

.vscode/

*.code-workspace

*.sublime-project

*.sublime-workspace

*~

# Tooling local state

.envrc

.direnv/

.mise.local.toml

.task/

.codex/

.agents/