# Secrets — never commit
.env
acme.json
acme.json.bak
acme.json.backup

# config.yml is COMMITTED. It is secret-free: the CrowdSec bouncer (the only
# middleware needing a key) is defined as a Docker label in docker-compose.yml
# so its key stays in .env.

# Logs
logs/
*.log

# CrowdSec runtime state (separate stack)
crowdsec/

# OS / IDE
.DS_Store
Thumbs.db
.vscode/
.idea/
*.swp
*.swo
*~