.env
backups/
drasl/config/keycloak-client-secret
runtime/authlib-injector.jar

# rendered configs (from tooling/render-config.sh)
drasl/config/config.toml
dnsmasq/dnsmasq.conf

# vendored / mirrored binaries
mirror/
pack/mods-files/

# landing page: generated build output + deps
www/
landing/node_modules/
landing/.astro/
landing/dist/

# exported Caddy CA (per-deploy artifact)
caddy/caddy-root-ca.crt
