# ---> Ansible
*.retry
ansible.log

# Vault password files - CRITICAL: Never commit these!
.vault_password
.vault_pass
vault_password.txt
**/vault_password.txt
~/.ansible/vault_password.txt

# Unencrypted vault files (safety backups)
**/vault.yml.unencrypted
**/secrets.yml.unencrypted
**/*-vault.yml.unencrypted
**/*.vault.yml.dec
**/*.decrypted

# Fact cache
.ansible/
/tmp/ansible_facts/
fact_cache/

# Temporary files
*.tmp
*.swp
*.swo
*~
.*.sw?

# Local override files
local.yml
override.yml
*-local.yml
*_local.yml
local_*.yml

# IDE and editor files
.vscode/
.idea/
*.iml
.project
.settings/
*.sublime-project
*.sublime-workspace

# OS files
.DS_Store
.DS_Store?
._*
.Spotlight-V100
.Trashes
ehthumbs.db
Thumbs.db

# Sensitive data patterns
credentials.yml
passwords.yml
private_keys/
*.key
*.pem
*.crt
*.csr
*.p12
*.pfx

# Backup files
*.bak
*.backup
*~

# Test and development
test_inventory/
dev/
scratch/
tmp/
.vagrant/
*.box

# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
venv/
ENV/
env/

# Logs
*.log
logs/

# Claude plans (optional - remove if you want to track them)
.claude/

# Other
.env
.envrc