.gitignore (471B)
1 result 2 result-* 3 # never commit decrypted material or the age key 4 secrets/*.dec 5 secrets/*.plain* 6 keys.txt 7 8 # scratch of the plan executor and a stray empty clone, never flake source 9 .superpowers/ 10 /NixDaemon/ 11 12 # Vault data and plaintext recovery material belong outside this public flake. 13 *.luks 14 *.luks.building 15 *.luksHeader 16 *.header.bin 17 ssd.key 18 vault.key 19 vault.passphrase 20 secure-vault-header.* 21 /secrets/*.key 22 /secrets/*.pem 23 /secrets/*.backup 24 /secrets/*.bak 25 /secrets/*.tmp