# Secrets never live in git (~/.creds / HA secrets.yaml only)
secrets.yaml

# Runtime state, credentials, and machine-local data
.storage/auth
.storage/auth_module.totp
.storage/auth_provider.homeassistant
.storage/http.auth
.storage/http.auth.*
.storage/onboarding
.storage/backup
.cache/
.cloud/
.ha_run.lock
zigbee.db
*.db
*.db-shm
*.db-wal

# Logs and transient files
*.log
*.log.fault
deps/
tts/

# runtime state — lives on the box + backups, churns every minute
.storage/