.env
backups/
drasl/config/keycloak-client-secret
runtime/authlib-injector.jar

# rendered configs (from tooling/render-config.sh)
drasl/config/config.toml
dnsmasq/dnsmasq.conf
# packwiz pack files rendered from pack/**/*.tmpl by tooling/render-pack.sh
# (domain-dependent build output); source of truth is the .tmpl + custom/ jars.
pack/mods/*.pw.toml
pack/index.toml
pack/CustomSkinLoader/CustomSkinLoader.json

# vendored / mirrored binaries
mirror/
pack/mods-files/

# landing page: generated build output + deps
www/
landing/node_modules/
landing/.astro/
landing/dist/

# exported Caddy CA (per-deploy artifact)
caddy/caddy-root-ca.crt