output/
secrets.h

# zigbee coordinator -> uptime kuma push token
infra/.secrets/

# runtime state & node-red/mosquitto secrets - not versioned
infra/zigbee2mqtt/state.json
infra/zigbee2mqtt/coordinator_backup.json
infra/zigbee2mqtt/database.db
infra/zigbee2mqtt/database.db.*
infra/zigbee2mqtt/log/
infra/mosquitto/data/
infra/mosquitto/log/
infra/mosquitto/config/passwd
infra/nodered/.npm/
infra/nodered/*.backup
infra/nodered/.config.nodes.json
infra/nodered/.config.runtime.json
infra/nodered/.config.users.json
infra/nodered/flows_cred.json

# operator tool pin
mise.toml

# per-service local secrets (env_file) - never commit
infra/**/.env