initial public commit

.gitignore

@@ -0,0 +1,41 @@
+# ── Runtime state ─────────────────────────────────────────
+letsencrypt/*
+!letsencrypt/.gitkeep      # keep the dir, ignore its files
+
+work/*
+!work/.gitkeep             # same idea for work/
+
+lib/backups/*
+!lib/backups/.gitkeep      # backup snapshots stay local only
+
+# ── Private keys / cert material ─────────────────────────
+*.pem
+*.key
+*.crt
+*.csr
+*.p12
+*.jks
+
+# ── Logs & temp files ─────────────────────────────────────
+*.log
+*.tmp
+*.pid
+*.sock
+*.swp
+*~
+
+# ── Editor / OS noise ─────────────────────────────────────
+.DS_Store
+.idea/
+.vscode/
+
+# ── Ignore nearly everything in conf.d/ ───────────────────
+conf.d/*
+!conf.d/*.example.conf      # keep canonical examples
+!conf.d/README.md           # optional explanatory file
+
+# ── Ignore nearly everything in stream.d/ ─────────────────
+stream.d/*
+!stream.d/*.example.conf
+!stream.d/README.md
+