.gitignore

node_modules
dist/
dist-ssr/
.output
.vinxi
.tanstack/**
.nitro
.wrangler/
.playwright-cli/
output/
.dev.vars
.env
.env.*
!.env.example
# Operator-filled miner secrets for docker-compose fleet mode (#5177); the .example is committed.
.loopover-miner.env
!.loopover-miner.env.example
!.env.selfhost.example
# Docker Compose secret files: the actual secret VALUES an operator drops into
# secrets/<name>.txt for the native `secrets:` mount (docker-compose.yml), read via the existing generic
# <NAME>_FILE convention (src/selfhost/load-file-secrets.ts). Same exposure class as .env above -- never
# committed. README.md stays tracked (it's the setup doc, not a secret) via the negation below.
secrets/*
!secrets/README.md
docker-compose.override.yml
!docker-compose.override.yml.example
# Fleet-mode ↔ ams-observability bridge override an operator copies from the committed `.example` (#5805); their
# real host path stays local, only the `.example` template is tracked.
packages/loopover-miner/docker-compose.miner.override.yml
!packages/loopover-miner/docker-compose.miner.override.yml.example
*.local
# A second local-override naming shape beyond bare `*.local` (e.g. alertmanager.local): a host-specific
# compose override named docker-compose.local-<label>.yml (label distinguishes multiple such overrides
# on one operator, e.g. local-gpu) -- *.local alone does not match this since `.local` sits mid-name,
# not as the literal filename suffix. #4664
docker-compose.local-*.yml
# Alertmanager receiver webhook files used by self-host local configs.
alertmanager/*_url
alertmanager/*_url_file
# Private self-host operator config. Root AGENTS.md/CLAUDE.md are public project docs;
# repo-scoped review instructions live under this ignored mount.
loopover-config/
loopover-config.backup-*/
# Operator deploy-backup snapshots -- contains raw .env/.yml backups and config tarballs, same
# exposure class as loopover-config/ above (secrets + private review rules), just under a
# different directory name that the pattern above does not match.
.deploy-backups/
# Codex/CLI auth state must only live in runtime volumes or operator home dirs.
.codex/
**/.codex/
auth.json
**/auth.json
.DS_Store
coverage/
*.tsbuildinfo
site/.vitepress/cache/
!migrations/*.sql
apps/loopover-ui/public/downloads/loopover-extension.zip
.worker-configuration.gen-check.d.ts
# Ad-hoc operator backup files (e.g. `cp file.yml file.yml.bak-notes-20260707`) -- general
# catch-alls so a stray manual snapshot never dirties `git status` on a Git-backed self-host
# checkout. Trailing on purpose: the narrower loopover-config.backup-*/ and .deploy-backups/
# rules above already cover their specific directories, and nothing tracked in the repo matches
# either pattern (verified via `git ls-files | grep -E '\.bak-|\.backup-'`) (#1660).
*.bak-*
*.backup-*