# ── Runtime state ─────────────────────────────────────────
letsencrypt/*
!letsencrypt/.gitkeep      # keep the dir, ignore its files

work/*
!work/.gitkeep             # same idea for work/

lib/backups/*
!lib/backups/.gitkeep      # backup snapshots stay local only

# ── Private keys / cert material ─────────────────────────
*.pem
*.key
*.crt
*.csr
*.p12
*.jks

# ── Logs & temp files ─────────────────────────────────────
*.log
*.tmp
*.pid
*.sock
*.swp
*~

# ── Editor / OS noise ─────────────────────────────────────
.DS_Store
.idea/
.vscode/

# ── Ignore nearly everything in conf.d/ ───────────────────
conf.d/*
!conf.d/*.example.conf      # keep canonical examples
!conf.d/README.md           # optional explanatory file

# ── Ignore nearly everything in stream.d/ ─────────────────
stream.d/*
!stream.d/*.example.conf
!stream.d/README.md