/node_modules
/public/build
/public/hot
/public/storage
/public/vendor
/storage/*.key
/vendor
.env
.env.backup
.env.production
.phpunit.result.cache
Homestead.json
Homestead.yaml
auth.json
npm-debug.log
yarn-error.log
/.fleet
/.idea
/.vscode
.DS_Store
/docker/mysql/data
/docker/redis/data

# --- deployment / local artefacts -------------------------------------
# SQLite database and its write-ahead files: real data, never commit it.
# (The production template .env.production.example IS tracked.)
/database/*.sqlite
/database/*.sqlite-journal
/database/*.sqlite-wal
/database/*.sqlite-shm

# The install marker. Committing it would leave a fresh clone believing the
# application is already installed.
/storage/installed.lock

# Error/debug logs. These leaked absolute server paths and stack traces
# once from public/ and were world-readable over HTTP.
*.log

# Stray archives and curl cookie jars (cj_*.txt held live session tokens).
/*.zip
cj_*.txt
