# Secrets never live in git (~/.creds / HA secrets.yaml only)
secrets.yaml

# Runtime state, credentials, and machine-local data
.storage/auth
.storage/auth_module.totp
.storage/auth_provider.homeassistant
.storage/http.auth
.storage/http.auth.*
.storage/onboarding
.storage/backup
.cache/
.cloud/
.ha_run.lock
zigbee.db
*.db
*.db-shm
*.db-wal

# Logs and transient files
*.log
*.log.fault
deps/
tts/

# runtime state — lives on the box + backups, churns every minute
.storage/

# vendored custom components manage themselves in-place (HACS self-updates)
custom_components/

# session ticket-gate scratch (PFVCluster-side, never config)
.crush/
