# Ignore unencrypted secrets
*.env
!*.env.example
.env.*
!.env.*.example

# Ignore age private keys (if accidentally placed here)
*.txt

# Keep encrypted files
!*.age