# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
venv/
env/
ENV/
.venv

# Flask
instance/
.webassets-cache

# Persistent data folder (containers, database, uploads)
data/

# IDEs
.vscode/
.idea/
*.swp
*.swo
*~

# Environment
.env
.env.local
.env.*.local

# Ad-hoc backups of .env (they contain real secrets — must never be committed)
.env.bak
.env.bak.*
.env.*.bak
*.env.bak

# Deployment artefacts that contain secrets
.deployment-credentials
caddy-root.crt

# Certificates / keys (generated by Caddy or the host)
*.pem
*.key
!data/caddy-data/**
!Caddyfile.example

# Database
*.db
*.sqlite
*.sqlite3

# Uploads
app/static/uploads/*
!app/static/uploads/.gitkeep
app/static/resurse/*
!app/static/resurse/.gitkeep

# Logs
*.log

# OS
.DS_Store
Thumbs.db

# Testing
.coverage
htmlcov/
.pytest_cache/
.tox/

# Build
dist/
build/
*.egg-info/

#data
data/

# Local archive / restore-point snapshots.
# Kept on disk for reference (see docs/SANITIZATION-REVIEW.md) but deliberately
# NOT tracked: docs/legacy code/ is a full pre-sanitization repo snapshot and
# docs/old_code_documentation/ is a byte-identical copy of the tree inside it.
docs/legacy code/
docs/old_code_documentation/