# ── Secrets ─────────────────────────────────────────────────────────
# The only file that holds credentials. Never committed, and never
# included in a release archive either — the installer writes it on the
# server from the operator's own input.
orya-app/config/config.local.php

# ── Runtime state ───────────────────────────────────────────────────
orya-app/storage/cache/*
orya-app/storage/locks/*
orya-app/storage/logs/*
orya-app/storage/reports/*
orya-app/storage/backups/*
!orya-app/storage/*/.gitkeep

# ── Local development ───────────────────────────────────────────────
# A PHP build lives beside the project so the code can be linted and
# smoke-tested before it reaches a server. It is not part of the project.
tools/
.dev/

# ── Noise ───────────────────────────────────────────────────────────
*.log
*.sql
*.sqlite
.DS_Store
Thumbs.db
.idea/
.vscode/
*.swp
*~
