# Rust build artifacts
/target
**/*.rs.bk

# Cargo.lock IS tracked — this is a deployable binary, so we want reproducible builds.
# (Do not ignore it.)

# Environment / secrets — never commit anything but the example.
.env
.env.*
!.env.example
*.key
*.pem
# Bare-hex secret files (e.g. `smirk-admin create-admin-wallet --out admin-key.hex`)
# so an operator running inside the checkout cannot commit the raw admin key.
*.hex
admin-key*
*.p12
secrets/
secret_store/

# Runtime / data
*.log
data/
*.sqlite
*.db

# Tor hidden-service keys (admin onion) must never enter the repo.
tor/
hs_ed25519_secret_key

# Editor / OS
.DS_Store
.idea/
.vscode/
*.swp

# container cross-build output (glibc-compat binary for deploy)
/target-deb/