# --- Environment / secrets ---
.env
.env.*
!.env.example
*.pem
*.key
*.crt
certs/

# --- Run-time data / uploads ---
uploads/
backups/
*.sql.gz
*.tar.gz

# --- Node ---
node_modules/

# --- Logs / tmp / OS ---
*.log
.tmp/
tmp/
.DS_Store
Thumbs.db

# --- Internal audit (not for commit) ---
SECURITY_AUDIT.md
