# Local deployment config — contains secrets (LDAP admin password, JWT secret,
# OAuth client secret, LDAP service password, SMTP creds). Never commit.
# ./config/ holds the live sso-secrets.js + proxy-secrets.js (generated by
# setup.sh); committed examples live in config.example/.
config/
backups/

# Legacy .env / proxy.env (no longer used — config is in ./config/). Still
# ignored in case a migrated deployment hasn't deleted them yet.
.env
proxy.env

# Backup artifacts (hold secrets — the whole user directory + Redis dumps)
*.rdb
*.ldif

# Docker Compose runtime artifacts
*.log