Update

.gitignore

@@ -1,3 +1,100 @@
 # ---> Ansible
 *.retry
+ansible.log
+
+# Vault password files - CRITICAL: Never commit these!
+.vault_password
+.vault_pass
+vault_password.txt
+**/vault_password.txt
+~/.ansible/vault_password.txt
+
+# Unencrypted vault files (safety backups)
+**/vault.yml.unencrypted
+**/secrets.yml.unencrypted
+**/*-vault.yml.unencrypted
+**/*.vault.yml.dec
+**/*.decrypted
+
+# Fact cache
+.ansible/
+/tmp/ansible_facts/
+fact_cache/
+
+# Temporary files
+*.tmp
+*.swp
+*.swo
+*~
+.*.sw?
+
+# Local override files
+local.yml
+override.yml
+*-local.yml
+*_local.yml
+local_*.yml
+
+# IDE and editor files
+.vscode/
+.idea/
+*.iml
+.project
+.settings/
+*.sublime-project
+*.sublime-workspace
+
+# OS files
+.DS_Store
+.DS_Store?
+._*
+.Spotlight-V100
+.Trashes
+ehthumbs.db
+Thumbs.db
+
+# Sensitive data patterns
+credentials.yml
+passwords.yml
+private_keys/
+*.key
+*.pem
+*.crt
+*.csr
+*.p12
+*.pfx
+
+# Backup files
+*.bak
+*.backup
+*~
+
+# Test and development
+test_inventory/
+dev/
+scratch/
+tmp/
+.vagrant/
+*.box
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+venv/
+ENV/
+env/
+
+# Logs
+*.log
+logs/
+
+# Claude plans (optional - remove if you want to track them)
+.claude/
+
+# Other
+.env
+.envrc