# Nix
result
result-*
.direnv/

# Compiled binaries
grapho
*_test

# Secrets (NEVER commit unencrypted secrets)
secrets/*.yaml
!secrets/secrets.yaml.example
*.key
*.pem
.age
.sops

# Editor
*.swp
*.swo
*~
.vim/
.nvim/
.vscode/
.idea/

# OS
.DS_Store
Thumbs.db

# Hardware configs (machine-specific)
hosts/*/hardware-configuration.nix