# Database credentials / local config
app/config.php
app/config.php.bak
app/config.*.php
!app/config.example.php
.env
.env.*
!.env.example

# Passwords / secrets / private keys (keep RELEASE_PUBLIC_KEY.pem)
*.key
*.pem
!RELEASE_PUBLIC_KEY.pem
*.p12
*.pfx
*.crt
id_rsa
id_rsa.*
*_rsa
*_rsa.*
secret.key
storage/private/release_keys/
credentials.json
*credentials*.local.*
*.secret

# Logs
logs/
*.log
*.log.*

# Cache
cache/
tmp/
temp/
*.cache

# Sessions
sessions/
storage/sessions/
*.sess

# Uploaded documents / runtime evidence
uploads/**
!uploads/.htaccess
!uploads/**/.htaccess
storage/private/**
!storage/private/.htaccess
!storage/private/**/.htaccess

# Backups
*.bak
*.bak-*
*.backup
*.old
*.orig
*~

# ZIP archives
*.zip
*.ZIP

# OS / editor noise
.DS_Store
Thumbs.db
.idea/
.vscode/
*.swp
*.swo
