# Virtual environments
.kuma_venv/
venv/
.envs/

# Environment and secrets
.env
.env.*
.env.local
.bitwarden_env
*.secret
secrets.yaml
secrets.yml

# SSH Keys and credentials
*.key
*.pem
*.p12
*.pfx
id_rsa
id_ed25519
id_ecdsa
.ssh/

# CrowdSec API credentials (auto-generated, contain passwords)
crowdsec/conf/local_api_credentials.yaml
crowdsec/conf/online_api_credentials.yaml

# CrowdSec hub/cache/runtime content that can cause repo-map noise
crowdsec/hub/
crowdsec/data/
crowdsec/conf/hub/
crowdsec/conf/patterns/
crowdsec/conf/contexts/
crowdsec/conf/scenarios/
crowdsec/conf/collections/
crowdsec/conf/postoverflows/

# IDE / tools
.claude/
.cursor/
.vscode/
.idea/

# Home Assistant sensitive files and directories
homeassistant/config/google-service-account.json
homeassistant/config/google-service-account*.json
homeassistant/config/.storage/
homeassistant/config/.cloud/
homeassistant/config/auth_providers.yaml
homeassistant/config/onboarding
homeassistant/config/.homeassistant
homeassistant/config/tts/
homeassistant/config/www/frigate_notification/
homeassistant/config/translations/
homeassistant/config/secrets.yaml
homeassistant/config/.git/
homeassistant/frigate/
homeassistant/ssh_dir/
homeassistant/doorbell/
homeassistant/sysctl.d/
homeassistant/tmp.sh
homeassistant/resolv.conf

# Binary and media files
*.jpg
*.jpeg
*.png
*.gif
*.mp4
*.mkv
*.avi
*.mov
*.mp3
*.wav
*.flac
*.webp
# ML model binaries
*.onnx
*.tflite
*.pt
*.pth
*.safetensors

# Piper TTS voice models
piper/*.onnx
piper/*.onnx.json

# Prometheus storage (time-series data blocks)
prometheus/storage/

# Database files
*.db
*.db-shm
*.db-wal
*.sqlite
*.sqlite3
*.sql
*.dump

# Cache and runtime
.cache/
*.pyc
__pycache__/
*.egg-info/
.pytest_cache/
.coverage
*.log
*.tmp

# System files
.DS_Store
Thumbs.db
*.swp
*.swo
*~

# IDE
.vscode/
.idea/
*.code-workspace

# Docker
.dockerignore

# Temporary files
temp/
tmp/
*_backup
*.backup

# Node modules and dependencies
node_modules/
package-lock.json
yarn.lock

# Build artifacts
dist/
build/
out/

# AdGuard - auto-downloaded filter lists + private DNS query logs
adguard/work/
adguard/workdir/data/filters/
adguard/workdir/data/querylog*
adguard/conf/querylog*
adguard/confdir/data/

# Frigate
frigate/clips/
frigate/recordings/
frigate/cache/
frigate/model_cache/
# Frigate secrets and runtime state
frigate/.htpasswd
frigate/.jwt_secret
frigate/.exports
frigate/.timeline
frigate/.vacuum

# Immich
immich/data/
immich/cache/
immich/postgres/
immich/model-cache/

# Mosquitto (password files)
mosquitto/config/mosquitto.passwd
mosquitto/config/passwords.mqtt

# Media server data
jellyfin/data/
jellyfin/cache/
jellyfin/plugins/
jellyfin/config/data/
jellyfin/config/log/
jellyfin/config/plugins/
jellyfin/config/plugins_old/
jellyfin/config/root/
jellyfin/config/config/
jellyfin/config/.jellyfin-data
jellyfin/Downloads/

# Duplicati runtime/config data
duplicati/config/.bash_history
duplicati/config/.dotnet/
duplicati/config/control_dir_v2/

# Glance secrets
glance/.htpasswd

# Unifi
unifi/data/
unifi-db/
unifi-config/data/
unifi-config/log/

# Radarr - additional data dirs (config subdir pattern)
radarr/config/Backups/
radarr/config/Sentry/
radarr/config/*.pid

# Redis
redis/data/

# PostgreSQL
postgres/
postgres18/data/

# Vaultwarden / Bitwarden
vaultwarden/data/
bitwarden/attachments/
bitwarden/sends/
bitwarden/icon_cache/
bitwarden/data.db
bitwarden/data.db-shm
bitwarden/data.db-wal

# Traefik
traefik/letsencrypt/

# Loki
loki/chunks/
loki/indexes/
loki/wal/
loki/data/

# VictoriaMetrics
victoriametrics/
vm_data/

# CrowdSec - auto-managed content (downloaded by cscli, not manually edited)
crowdsec/data/
crowdsec/conf/hub/
crowdsec/conf/patterns/

# Ollama models (gigabytes of binary model files)
ollama_data/

# Open WebUI runtime data
open-webui_data/

# ChromaDB vector store (root-owned)
chromadb/data/

# Gotify data (root-owned)
gotify_data/

# Whisper models (root-owned, large binaries)
whisper/

# Perkeep data storage
perkeep/

# Portainer data
portainer/

# Embedded git repositories (managed independently)
ha-tahoma/
torrent-box-with-vpn/
wyoming-openwakeword/

# Sonarr/Radarr/Prowlarr - runtime data (databases, crash reports, media covers)
sonarr/Sentry/
sonarr/logs/
sonarr/Backups/
sonarr/MediaCover/
sonarr/*.pid
radarr/Sentry/
radarr/logs/
radarr/Backups/
radarr/MediaCover/
radarr/*.pid
prowlarr/Backups/
prowlarr/logs/
prowlarr/*.pid


# qBittorrent runtime data
qbit-vpn/config/.bash_history
qbit-vpn/config/.wget-hsts
qbit-vpn/config/data/qBittorrent/logs/
qbit-vpn/config/qBittorrent/logs/

# Transmission runtime data + VPN credentials (root-owned)
transmission-vpn/transmission-home/

# Side agent
side-agent/manifest/

# Claude Code session data and instructions
.claude/
CLAUDE.md
QWEN.md

# Gitea runtime data (sessions, SSH keys, databases)
gitea/

# OTHERS
log-ingester/state/state.json
.aider*
