# Dotfiles .gitignore

# Never commit sensitive files
*.key
*.pem
*.p12
*.pfx
id_rsa*
id_dsa*
id_ecdsa*
id_ed25519*

# Backup directories - allow encrypted files only
backups/**/*.tar.gz
backups/**/*.tar
!backups/**/*.tar.gz.gpg
!backups/**/RESTORE_INSTRUCTIONS.md
.dotfiles-backup/

# OS generated files
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db

# Application specific
.vscode/
*.log

# Temporary files
*.tmp
*.swp
*.swo
*~

# Mackup backup location
mackup-backup/

# Local environment files
.env
.env.local

# Obsidian vault files (these are synced via iCloud)
*.obsidian/workspace
*.obsidian/workspace.json
*.obsidian/cache/

# SSH and GPG - exclude private keys but include config
ssh/id_*
ssh/known_hosts
gnupg/private-keys-v1.d/
gnupg/pubring.kbx*
gnupg/trustdb.gpg
gnupg/random_seed
gnupg/S.*
gnupg/*.db

# Application-specific secrets
.aws/
.gcloud/
.docker/config.json

# History files (use backup scripts instead)
.zsh_history
.bash_history