# Legacy: zones-prepared/ was the generated form when scripts/prepare-zones.sh
# (now in scripts/archive/) processed zones/. We retired that pipeline in
# favour of editing zones/*.zone directly as RFC-compliant served files.
# If anyone runs the archived script, the output stays out of git.
zones-prepared/*.zone

# Self-signed certs (re-generated by scripts/generate-certs.sh)
certs/*.pem

# Caddy's runtime data: issued certs, ACME account keys, transient state.
# NEVER commit — contains the ACME account private key.
caddy-data/
caddy-config/

# Local-only env overrides
.env.local