# Per-installation state produced by install.sh / install.ps1.
# None of this belongs in the repository or in a distributed bundle.

# Generated secrets
.env
.env.local
.env.*.local
secrets/

# Key material generated at install time. The *-dev filenames are the paths the
# services are configured to read; the contents are installation-specific.
config/etc/authority/keys/*.pem
config/etc/authority/keys/*.pfx
config/etc/scanner/keys/*.pem
config/etc/release-orchestrator/keys/*.pem

# Operator-supplied content
airgap-import/
offline/
plugins/
config/contracts/*.zip
config/seed/*
!config/seed/.gitkeep

# Release outputs
docker-compose.pinned.yml
release-manifest.yaml.sig
release-manifest.yaml.pem
release-signing.pub
*.tar.gz

__pycache__/
