# secrets / runtime state — never publish
.env
.env.*
*.sqlite
*.sqlite3
*.db
.htpasswd
# caches / scratch
cache/
tmp/
*.log