# Dev-only deployment helpers — they contain plaintext VPS credentials,
# so they are never committed. Kept in tools/ rather than install/:
# install/ is the one directory a CUSTOMER is told to read, and any zip,
# tarball, rsync or screenshare of the working tree would have handed
# them a live root-capable password sitting next to the scripts they were
# asked to run.
# tools/_* and install/_*, not just *.py: the pattern has to cover
# whatever form a secret takes. tools/_release-secrets.txt is a .txt,
# and under the old .py-only rule `git add -A` would have committed a
# file whose entire purpose is to hold credentials.
tools/_*
install/_*
*.log

__pycache__/
*.pyc

# Backend
admin/backend/.env
admin/backend/venv/
admin/backend/staticfiles/
admin/backend/db.sqlite3

# Release archives built by tools/make-release.sh
dist/

# Frontend
admin/frontend/.env
admin/frontend/node_modules/
admin/frontend/dist/
